STIGQter: STIG Summary: VMware vSphere 7.0 Virtual Machine Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 30 Jan 2025:

System administrators must use templates to deploy virtual machines (VMs) whenever possible.

DISA Rule

SV-256468r959010_rule

Vulnerability Number

V-256468

Group Title

SRG-OS-000480-VMM-002000

Rule Version

VMCH-70-000020

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Create hardened VM templates to use for operating system deployments.

Check Contents

Ask the system administrator if hardened, patched templates are used for VM creation and properly configured operating system deployments, including applications dependent and nondependent on VM-specific configurations.

If hardened, patched templates are not used for VM creation, this is a finding.

Vulnerability Number

V-256468

Documentable

False

Rule Version

VMCH-70-000020

Severity Override Guidance

Ask the system administrator if hardened, patched templates are used for VM creation and properly configured operating system deployments, including applications dependent and nondependent on VM-specific configurations.

If hardened, patched templates are not used for VM creation, this is a finding.

Check Content Reference

M

Target Key

5519