STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The VMM must implement multifactor authentication for remote access to privileged accounts such that one of the factors is provided by a device separate from the system gaining access.

DISA Rule

SV-207480r984255_rule

Vulnerability Number

V-207480

Group Title

SRG-OS-000375

Rule Version

SRG-OS-000375-VMM-001510

Severity

CAT II

CCI(s)

• CCI-004046 - Implement multi-factor authentication for local; network; and/or remote access to privileged accounts; and/or non-privileged accounts such that one of the factors is provided by a device separate from the system gaining access.

Weight

10

Fix Recommendation

Configure the VMM to implement multifactor authentication for remote access to privileged accounts such that one of the factors is provided by a device separate from the system gaining access.

Check Contents

Verify the VMM implements multifactor authentication for remote access to privileged accounts such that one of the factors is provided by a device separate from the system gaining access.

If it does not, this is a finding.

Vulnerability Number

V-207480

Documentable

False

Rule Version

SRG-OS-000375-VMM-001510

Severity Override Guidance

Verify the VMM implements multifactor authentication for remote access to privileged accounts such that one of the factors is provided by a device separate from the system gaining access.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2924