ESXi : set-dcui-timeout

Information

Audit DCUI timeout value.

DCUI is used for directly logging into ESXi host and carrying out host management tasks. The idle connections to DCUI must be terminated to avoid any unintended usage of the DCUI originating from a left over login session.

Solution

From the vSphere Web Client select the host, click "Manage" -> "Settings" -> "System" -> "Advanced Sytem Settings". Enter "UserVars.DcuiTimeOut" in the filter. Click edit and set the value for this parameter to 600 or more restrictive.

See Also

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/files/xls/vmware-6-5-update-1-security-configuration-guide.xlsx

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-12

Plugin: VMware

Control ID: ee6fec1829e4ab1cb694760c8c2dff23076325f398ec960b5834a2e2044475ef