ESXI-06-100042 - The VMM must automatically terminate a user session after inactivity timeouts have expired or at shutdown by setting an idle timeout on shell services.


When the ESXi Shell or SSH services are enabled on a host they will run indefinitely. To avoid having these services left running set the ESXiShellTimeOut. The ESXiShellTimeOut defines a window of time after which the ESXi Shell and SSH services will automatically be terminated.


From the vSphere Client select the ESXi Host and go to Configuration >> Advanced Settings. Select the UserVars.ESXiShellTimeOut value and configure it to 600.


From a PowerCLI command prompt while connected to the ESXi host run the following commands:

Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Set-AdvancedSetting -Value 600

See Also

Item Details


References: 800-53|AC-12, CAT|II, CCI|CCI-002361, Group-ID|V-63775, Rule-ID|SV-78265r1_rule, STIG-ID|ESXI-06-100042, Vuln-ID|V-63775

Plugin: VMware

Control ID: 67d9654b0e342331161b98e3640f4904d0596f4e328c700aa430fa0288b42068