ESXI-06-100043 - The VMM must automatically terminate a user session after inactivity timeouts have expired or at shutdown.


When the Direct console user interface (DCUI) is enabled and logged in it should be automatically logged out if left logged in to avoid unauthorized privilege gains. The DcuiTimeOut defines a window of time after which the DCUI will be logged out.


From the vSphere Client select the ESXi Host and go to Configuration >> Advanced Settings. Select the UserVars.DcuiTimeOut value and configure it to 600.


From a PowerCLI command prompt while connected to the ESXi host run the following commands:

Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Set-AdvancedSetting -Value 600

See Also

Item Details


References: 800-53|AC-12, CAT|II, CCI|CCI-002361, Group-ID|V-63777, Rule-ID|SV-78267r1_rule, STIG-ID|ESXI-06-100043, Vuln-ID|V-63777

Plugin: VMware

Control ID: 485bb4bd350b48854e76abb8b65de17bcfad881ff75d53f4d3ad23c66fcef943