STIGQter: STIG Summary: VMware vSphere 6.7 vCenter Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 09 Mar 2021:

The vCenter Server must enable certificate based authentication.

DISA Rule

SV-243114r719585_rule

Vulnerability Number

V-243114

Group Title

SRG-APP-000516

Rule Version

VCTR-67-000059

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure CAC Authentication per supplemental document.

Check Contents

See supplemental document.

Ensure that CAC authentication is required to log in to the vSphere Client. If CAC authentication is not required, this is a finding.

Vulnerability Number

V-243114

Documentable

False

Rule Version

VCTR-67-000059

Severity Override Guidance

See supplemental document.

Ensure that CAC authentication is required to log in to the vSphere Client. If CAC authentication is not required, this is a finding.

Check Content Reference

M

Target Key

5399

Comments