STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jan 2024:

The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.

DISA Rule

SV-256341r892804_rule

Vulnerability Number

V-256341

Group Title

SRG-APP-000371

Rule Version

VCSA-70-000158

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Open the VAMI by navigating to https://<vCenter server>:5480.

Log in with local operating system administrative credentials or with an SSO account that is a member of the "SystemConfiguration.BashShellAdministrator" group.

Select "Time" on the left navigation pane.

On the resulting pane on the right, click "Edit" under "Time Synchronization".

Select "NTP" for "Mode" and enter a list of authorized time servers separated by commas. Click "Save".

Check Contents

Open the Virtual Appliance Management Interface (VAMI) by navigating to https://<vCenter server>:5480.

Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the "SystemConfiguration.BashShellAdministrator" group.

Select "Time" on the left navigation pane.

On the resulting pane on the right, verify at least one authorized time server is configured and is listed as "Reachable".

If "NTP" is not enabled and at least one authorized time server configured, this is a finding.

Vulnerability Number

V-256341

Documentable

False

Rule Version

VCSA-70-000158

Severity Override Guidance

Check Content Reference

Target Key

5517