STIGQter STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jan 2024:

vCenter task and event retention must be set to at least 30 days.

DISA Rule

SV-256373r885730_rule

Vulnerability Number

V-256373

Group Title

SRG-APP-000516

Rule Version

VCSA-70-000293

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click "Edit".

On the "Database" tab, set the value for both "Task retention" and "Event retention" to "30" days (default) or greater, as required by the site.

Click "Save".

Check Contents

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click to expand the "Database" section.

Note the "Task retention" and "Event retention" values.

If either value is configured to less than "30" days, this is a finding.

Vulnerability Number

V-256373

Documentable

False

Rule Version

VCSA-70-000293

Severity Override Guidance

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click to expand the "Database" section.

Note the "Task retention" and "Event retention" values.

If either value is configured to less than "30" days, this is a finding.

Check Content Reference

M

Target Key

5517