Detections
Analytics

1.54 VCSA-80-000291

Information

The vCenter Server must limit membership to the "TrustedAdmins" Single Sign-On (SSO) group.

GROUP ID: V-258957RULE ID: SV-258957r961863

The vSphere "TrustedAdmins" group grants additional rights to administer the vSphere Trust Authority feature.

To force accountability and nonrepudiation, the SSO group "TrustedAdmins" must be severely restricted.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

From the vSphere Client, go to Administration >> Single Sign On >> Users and Groups >> Groups.

Click the next page arrow until the "TrustedAdmins" group appears.

Click "TrustedAdmins".

Click the three vertical dots next to the name of each unauthorized account.

Select "Remove Member".

See Also

https://workbench.cisecurity.org/benchmarks/23621

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258957r961863_rule, STIG-ID|VCSA-80-000291, Vuln-ID|V-258957

Plugin: VMware

Control ID: 9d026685aed56686104a80d8a3501d3842a3a24c3832fb972afbf575be200c8b