Detections
Analytics

3.24 Host must display a login banner for the DCUI and Host Client

Information

Enabling a login banner on the Direct Console User Interface (DCUI) and the Host Client interfaces provides a mechanism to display legal notices or organizational announcements at login. The parameter governing this behavior is Annotations.WelcomeMessage, with the recommended value being a text string aligned with organizational or legal advisories.

A login banner serves as a first line of legal defense against unauthorized access and misuse, stating the terms and conditions of system use. It also aids in reinforcing organizational security policies among authorized users.

Solution

Set the approved banner using Get-VMHost | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Set-AdvancedSetting -Value '<approved banner>' -Confirm:$false, or configure it in Host > Configure > System > Advanced System Settings. Verify it displays in DCUI/Host Client.

Impact:

Implementation masks the "F2/F12" options and IP address information on the DCUI, potentially requiring additional documentation or training to ensure users are aware of these changes.

See Also

https://workbench.cisecurity.org/benchmarks/26357

Item Details

Category: CONFIGURATION MANAGEMENT, MAINTENANCE

References: 800-53|CM-7, 800-53|MA-4, CSCv7|5.1

Plugin: VMware

Control ID: ff1a0d95e9ec4e11206ae3af080b15b34b20f8a172bd9598216ec61123dd5e80