Virtual machines must require encryption for Fault Tolerance

OrtaDüzey 1Manuel incelemevmware

Açıklama

Requiring encryption for Fault Tolerance in virtual machines is critical for ensuring secure data transmission between primary and secondary VMs, especially in environments where sensitive data is processed. While the default setting 'opportunistic' may result in encryption due to widespread AES-NI support in vSphere-compatible hardware, enforcing the 'required' setting for ... Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

The following PowerCLI command may be used: (Get-VM -Name $VM).ExtensionData.Config.FtEncryptionMode

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

The following PowerCLI command may be used: $VMview = Get-VM -Name $VM | Get-View $ConfigSpec = New-Object VMware.Vim.VirtualMachineConfigSpec $ConfigSpec.FtEncryptionMode = New-object VMware.Vim.VirtualMachineConfigSpecEncryptedFtModes $ConfigSpec.FtEncryptionMode = "ftEncryptionRequired" $VMview.ReconfigVM_Task($ConfigSpec)

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: vmwareesxivirtual-machine
Referans: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 7.3 Virtual machines must require encryption for Fault Tolerance