Detections
Analytics

1.65 VCSA-80-000303

Information

The vCenter Server must disable Secure Shell (SSH) access.

GROUP ID: V-258968RULE ID: SV-258968r961863

vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.

vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Open the Virtual Appliance Management Interface (VAMI) by navigating to https://<vCenter server>:5480.

Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the "SystemConfiguration.BashShellAdministrator" group.

Select "Access" on the left navigation pane.

Click "Edit" then disable "Activate SSH Login" and click "OK".

See Also

https://workbench.cisecurity.org/benchmarks/23621

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258968r961863_rule, STIG-ID|VCSA-80-000303, Vuln-ID|V-258968

Plugin: VMware

Control ID: 146146789dced06a061e64239d9b8318fa37a47ad2d3243911291b76174bb04e