VMware ESXi
TMA-ESXI9-2.7
Host must have time synchronization services enabled and running
Mô tả
Ensure the host has time synchronization services enabled and operational as many functions such as cryptography, audit logging, cluster operations, and incident response/forensics depend on synchronized time. Services like NTP or PTP should be configured to start with the host and remain running to maintain time synchronization. The audit requires NTP enabled with servers (esxcli system ntp get) and the ntpd service running (/etc/init.d/ntpd status). Runs in the ESXi Shell (busybox sh) as root.
Cách kiểm tra
Phương pháp kiểm tra: Lệnh shell
out=$(esxcli system ntp get 2>/dev/null) || exit 1
en=$(printf '%s\n' "$out" | sed -n 's/^ *Enabled: *//p' | head -n 1)
srv=$(printf '%s\n' "$out" | sed -n 's/^ *Servers\{0,1\}: *//p' | head -n 1)
[ "$en" = true ] && [ -n "$srv" ] || { echo "ntp enabled=$en servers=$srv"; exit 1; }
st=$(/etc/init.d/ntpd status 2>&1)
case "$st" in *'not running'*) echo 'ntpd is not running' ;; *running*) echo compliant ;; *) echo "ntpd status: $st" ;; esac- Đầu ra mong đợi
compliant
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
1. Configure approved NTP servers 2. Enable the NTP client firewall ruleset if required 3. Set the NTP service startup policy to start and stop with the host, and start the service. Example: esxcli system ntp set --enabled true after configuring approved servers. Verify synchronization after remediation.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- vmwareesxibase
- Tham chiếu
- CIS VMware ESXi 9.0 Benchmark v1.0.0 - 2.7 Host must have time synchronization services enabled and running
Kiểm tra máy này
Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.
tmaegis scan --target vmware