| PHTN-40-000004 - The Photon operating system must enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000005 - The Photon operating system must display the Standard Mandatory DoW Notice and Consent Banner before granting local or remote access to the system. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000014 - The Photon operating system must configure auditd to log to disk. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000019 - The Photon operating system must be configured to audit the execution of privileged functions. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| PHTN-40-000031 - The Photon operating system must generate audit records when successful/unsuccessful attempts to access privileges occur. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000040 - The Photon operating system must not have the telnet package installed. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | IDENTIFICATION AND AUTHENTICATION |
| PHTN-40-000042 - The Photon operating systems must enforce a 90-day maximum password lifetime restriction. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | IDENTIFICATION AND AUTHENTICATION |
| PHTN-40-000046 - The Photon operating system must require authentication upon booting into single-user and maintenance modes. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000049 - The Photon operating system must not have duplicate User IDs (UIDs). | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | IDENTIFICATION AND AUTHENTICATION |
| PHTN-40-000069 - The Photon operating system must terminate idle Secure Shell (SSH) sessions after 15 minutes. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| PHTN-40-000076 - The Photon operating system must audit all account modifications. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000080 - The Photon operating system must initiate session audits at system startup. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000082 - The Photon operating system must protect audit tools from unauthorized access. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000086 - The Photon operating system must enforce password complexity by requiring that at least one special character be used. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | IDENTIFICATION AND AUTHENTICATION |
| PHTN-40-000110 - The Photon operating system must allocate audit record storage capacity to store audit records when audit records are not immediately sent to a central audit record storage facility. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000112 - The Photon operating system must immediately notify the SA and ISSO when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| PHTN-40-000130 - The Photon operating system TDNF package management tool must cryptographically verify the authenticity of all software packages during installation. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000133 - The Photon operating system must require users to reauthenticate for privilege escalation. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | IDENTIFICATION AND AUTHENTICATION |
| PHTN-40-000187 - The Photon operating system must define default permissions for all authenticated users in such a way that the user can only read and modify their own files. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000188 - The Photon operating system must configure Secure Shell (SSH) to disallow HostbasedAuthentication. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000193 - The Photon operating system must prevent leaking information of the existence of a user account. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000194 - The Photon operating system must audit logon attempts for unknown users. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000197 - The Photon operating system must be configured to use the pam_pwquality.so module. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | IDENTIFICATION AND AUTHENTICATION |
| PHTN-40-000199 - The Photon operating system TDNF package management tool must cryptographically verify the authenticity of all software packages during installation for all repos. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000208 - The Photon operating system must configure Secure Shell (SSH) to disable user environment processing. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000211 - The Photon operating system must configure Secure Shell (SSH) to disallow Generic Security Service Application Program Interface (GSSAPI) authentication. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000213 - The Photon operating system must configure Secure Shell (SSH) to perform strict mode checking of home directory configuration files. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000214 - The Photon operating system must configure Secure Shell (SSH) to disallow Kerberos authentication. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000219 - The Photon operating system must configure Secure Shell (SSH) to limit the number of allowed login attempts per connection. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000220 - The Photon operating system must configure Secure Shell (SSH) to restrict AllowTcpForwarding. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000224 - The Photon operating system must not respond to IPv4 Internet Control Message Protocol (ICMP) echoes sent to a broadcast address. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000228 - The Photon operating system must log IPv4 packets with impossible addresses. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000231 - The Photon operating system must not perform IPv4 packet forwarding. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000232 - The Photon operating system must send TCP timestamps. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000238 - The Photon operating system must generate audit records for all access and modifications to the opasswd file. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000239 - The Photon operating system must implement only approved Message Authentication Codes (MACs) to protect the integrity of remote access sessions. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | ACCESS CONTROL |
| PHTN-40-000242 - The Photon operating system must enable the rsyslog service. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000244 - The Photon operating system must enable hardlink access control protection in the kernel. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| PHTN-40-000246 - The Photon operating system must restrict core dumps. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3 | Unix | CONFIGURATION MANAGEMENT |
| VCEM-67-000027 - Rsyslog must be configured to monitor and ship ESX Agent Manager log files - catalina | DISA STIG VMware vSphere 6.7 EAM Tomcat v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| VCEM-67-000027 - Rsyslog must be configured to monitor and ship ESX Agent Manager log files - firstboot | DISA STIG VMware vSphere 6.7 EAM Tomcat v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| VCEM-67-000027 - Rsyslog must be configured to monitor and ship ESX Agent Manager log files - stdout | DISA STIG VMware vSphere 6.7 EAM Tomcat v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| VCLD-80-000022 - The vCenter VAMI service must off-load log records onto a different system or media from the system being logged. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | AUDIT AND ACCOUNTABILITY |
| VCLD-80-000022 The vCenter VAMI service must off-load log records onto a different system or media from the system being logged. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1 | Unix | AUDIT AND ACCOUNTABILITY |
| VCLD-80-000031 The vCenter VAMI service must explicitly disable Multipurpose Internet Mail Extensions (MIME) mime mappings based on "Content-Type". | DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1 | Unix | CONFIGURATION MANAGEMENT |
| VCLD-80-000040 - The vCenter VAMI service must restrict access to the web server's private key. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | IDENTIFICATION AND AUTHENTICATION |
| VCLD-80-000062 - The vCenter VAMI service must disable directory listing. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCLD-80-000063 - The vCenter VAMI service must not be configured to use the "mod_status" module. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r3 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCLD-80-000064 The vCenter VAMI service must have debug logging disabled. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| VCLD-80-000102 The vCenter VAMI service must enable Content Security Policy. | DISA VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG v2r1 | Unix | CONFIGURATION MANAGEMENT |
