Detections
Analytics

ESXi: esxi-8.deactivate-cim

Information

The ESXi CIM service should be deactivated. Services which are not in use and are non-essential for operations should be deactivated.

Solution

Get-VMHostService -VMHost $ESXi | where {$_.Key -eq 'sfcbd-watchdog'} | Set-VMHostService -Policy Off
Get-VMHostService -VMHost $ESXi | where {$_.Key -eq 'sfcbd-watchdog'} | Stop-VMHostService

See Also

https://github.com/vmware/vcf-security-and-compliance-guidelines/raw/refs/heads/main/security-configuration-hardening-guide/vsphere/8.0/

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366

Plugin: VMware

Control ID: f50aab2035ab8966f2e4d1f380a7862d4c9f9b126864340ba494bd9735228d85