Detections
Analytics

DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1

Updated: 9/2/2026

Authority: DISA STIG

Plugin: Unix

Revision: 1.3

Estimated Item Count: 107

Audit Items

DescriptionCategories
DISA_STIG_VMware_vSphere_8.0_vCenter_Appliance_Photon_OS_4.0_v2r1.audit from DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1
PHTN-40-000003 - The Photon operating system must audit all account creations.
PHTN-40-000004 - The Photon operating system must enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.
PHTN-40-000005 - The Photon operating system must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system.
PHTN-40-000007 - The Photon operating system must limit the number of concurrent sessions to ten for all accounts and/or account types.
PHTN-40-000012 - The Photon operating system must monitor remote access logins.
PHTN-40-000013 - The Photon operating system must have the OpenSSL FIPS provider installed to protect the confidentiality of remote access sessions.
PHTN-40-000014 - The Photon operating system must configure auditd to log to disk.
PHTN-40-000016 - The Photon operating system must enable the auditd service.
PHTN-40-000019 - The Photon operating system must be configured to audit the execution of privileged functions.
PHTN-40-000021 - The Photon operating system must alert the ISSO and SA in the event of an audit processing failure.
PHTN-40-000026 - The Photon operating system must protect audit logs from unauthorized access.
PHTN-40-000030 - The Photon operating system must allow only authorized users to configure the auditd service.
PHTN-40-000031 - The Photon operating system must generate audit records when successful/unsuccessful attempts to access privileges occur.
PHTN-40-000035 - The Photon operating system must enforce password complexity by requiring that at least one uppercase character be used.
PHTN-40-000036 - The Photon operating system must enforce password complexity by requiring that at least one lowercase character be used.
PHTN-40-000037 - The Photon operating system must enforce password complexity by requiring that at least one numeric character be used.
PHTN-40-000038 - The Photon operating system must require the change of at least eight characters when passwords are changed.
PHTN-40-000039 - The operating system must store only encrypted representations of passwords.
PHTN-40-000040 - The Photon operating system must not have the telnet package installed.
PHTN-40-000041 - The Photon operating system must enforce one day as the minimum password lifetime.
PHTN-40-000042 - The Photon operating systems must enforce a 90-day maximum password lifetime restriction.
PHTN-40-000043 - The Photon operating system must prohibit password reuse for a minimum of five generations.
PHTN-40-000044 - The Photon operating system must enforce a minimum 15-character password length.
PHTN-40-000046 - The Photon operating system must require authentication upon booting into single-user and maintenance modes.
PHTN-40-000047 - The Photon operating system must disable unnecessary kernel modules.
PHTN-40-000049 - The Photon operating system must not have duplicate User IDs (UIDs).
PHTN-40-000059 - The Photon operating system must use mechanisms meeting the requirements of applicable federal laws, Executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.
PHTN-40-000067 - The Photon operating system must restrict access to the kernel message buffer.
PHTN-40-000068 - The Photon operating system must be configured to use TCP syncookies.
PHTN-40-000069 - The Photon operating system must terminate idle Secure Shell (SSH) sessions after 15 minutes.
PHTN-40-000073 - The Photon operating system /var/log directory must be restricted.
PHTN-40-000074 - The Photon operating system must reveal error messages only to authorized users.
PHTN-40-000076 - The Photon operating system must audit all account modifications.
PHTN-40-000078 - The Photon operating system must audit all account removal actions.
PHTN-40-000079 - The Photon operating system must implement only approved ciphers to protect the integrity of remote access sessions.
PHTN-40-000080 - The Photon operating system must initiate session audits at system startup.
PHTN-40-000082 - The Photon operating system must protect audit tools from unauthorized access.
PHTN-40-000086 - The Photon operating system must enforce password complexity by requiring that at least one special character be used.
PHTN-40-000092 - The Photon operating system must use cryptographic mechanisms to protect the integrity of audit tools.
PHTN-40-000093 - The operating system must automatically terminate a user session after inactivity time-outs have expired.
PHTN-40-000105 - The Photon operating system must enable symlink access control protection in the kernel.
PHTN-40-000107 - The Photon operating system must audit the execution of privileged functions.
PHTN-40-000108 - The Photon operating system must automatically lock an account until the locked account is released by an administrator when three unsuccessful logon attempts in 15 minutes occur.
PHTN-40-000110 - The Photon operating system must allocate audit record storage capacity to store audit records when audit records are not immediately sent to a central audit record storage facility.
PHTN-40-000112 - The Photon operating system must immediately notify the SA and ISSO when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity.
PHTN-40-000130 - The Photon operating system TDNF package management tool must cryptographically verify the authenticity of all software packages during installation.
PHTN-40-000133 - The Photon operating system must require users to reauthenticate for privilege escalation.
PHTN-40-000160 - The Photon operating system must implement address space layout randomization to protect its memory from unauthorized code execution.
PHTN-40-000161 - The Photon operating system must remove all software components after updated versions have been installed.