ESXi : enable-auth-proxy

Information

When adding ESXi hosts to Active Directory use the vSphere Authentication Proxy to protect passwords.
If you configure your host to join an Active Directory domain using Host Profiles the Active Directory credentials are saved in the host profile and are transmitted over the network. To avoid having to save Active Directory credentials in the Host Profile and to avoid transmitting Active Directory credentials over the network use the vSphere Authentication Proxy.

http://pubs.vmware.com/vsphere-60/topic/com.vmware.vsphere.security.doc/GUID-084B74BD-40A5-4A4B-A82C-0C9912D580DC.html
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

# Join the ESXI Host to the Domain -
Get-VMHost HOST1 | Get-VMHostAuthentication | Set-VMHostAuthentication -Domain domain.local -User Administrator -Password Passw0rd -JoinDomain

See Also

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/files/xls/vSphere_6_0_Hardening_Guide_GA_15_Jun_2015.xls

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-3

Plugin: VMware

Control ID: 4d6e77b06d520c70d7256bdea5cd6df4151f6bd5b8108df6a82606b209e7626b