Detections
Analytics

VMCH-70-000020 - System administrators must use templates to deploy virtual machines (VMs) whenever possible.

Information

Capture a hardened base operating system image (with no applications installed) in a template to ensure all VMs are created with a known baseline level of security. Use this template to create other, application-specific templates, or use the application template to deploy VMs. Manual installation of the operating system and applications into a VM introduces the risk of misconfiguration due to human or process error.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Create hardened VM templates to use for operating system deployments.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_7-0_Y25M01_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-256468r959010_rule, STIG-ID|VMCH-70-000020, Vuln-ID|V-256468

Plugin: VMware

Control ID: 4e066f23e3abae4fed898ca4eb51f9cec1ff52400794379136d6c8b0df996b34