Detections
Analytics

VCSA-80-000303 - The vCenter Server must disable Secure Shell (SSH) access.

Information

vCenter Server is delivered as an appliance and is and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Open the Virtual Appliance Management Interface (VAMI) by navigating to https://<vCenter server>:5480.

Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the "SystemConfiguration.BashShellAdministrator" group.

Select "Access" on the left navigation pane.

Click "Edit" then disable "Activate SSH Login" and click "OK".

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y26M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258968r1111830_rule, STIG-ID|VCSA-80-000303, Vuln-ID|V-258968

Plugin: VMware

Control ID: 85b3843573197b46f23b89dbf9abf82c2c44daa5e110dea838e3cb648ca462a4