Detections
Analytics
ESXI-06-100043 - The VMM must automatically terminate a user session after inactivity timeouts have expired or at shutdown.
Information
When the Direct console user interface (DCUI) is enabled and logged in it should be automatically logged out if left logged in to avoid unauthorized privilege gains. The DcuiTimeOut defines a window of time after which the DCUI will be logged out.Solution
From the vSphere Client select the ESXi Host and go to Configuration >> Advanced Settings. Select the UserVars.DcuiTimeOut value and configure it to 600.or
From a PowerCLI command prompt while connected to the ESXi host run the following commands:
Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Set-AdvancedSetting -Value 600
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMware_vSphere_6-0_ESXi_V1R5_STIG.zip
Item Details
Audit Name: DISA VMware vSphere ESXi 6.0 STIG v1r5
Category: ACCESS CONTROL
References: 800-53|AC-12, CAT|II, CCI|CCI-002361, Group-ID|V-63777, Rule-ID|SV-78267r1_rule, STIG-ID|ESXI-06-100043, Vuln-ID|V-63777
Plugin: VMware
Control ID: 2696ae9bf07d7534ef89a751c8d1f412f5afc9ba36801b8b94e14165a21892fb