STIGQter STIGQter: STIG Summary: VMware vSphere 8.0 Virtual Machine Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 31 Oct 2023:

Virtual machines (VMs) must remove unneeded floppy devices.

DISA Rule

SV-258722r933227_rule

Vulnerability Number

V-258722

Group Title

SRG-OS-000480-VMM-002000

Rule Version

VMCH-80-000209

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.

The VM must be powered off to remove a floppy drive.

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:

Get-VM "VM Name" | Get-FloppyDrive | Remove-FloppyDrive

Check Contents

Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:

Get-VM | Get-FloppyDrive | Select Parent, Name, ConnectionState

If a virtual machine has a floppy drive connected, this is a finding.

Vulnerability Number

V-258722

Documentable

False

Rule Version

VMCH-80-000209

Severity Override Guidance

Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:

Get-VM | Get-FloppyDrive | Select Parent, Name, ConnectionState

If a virtual machine has a floppy drive connected, this is a finding.

Check Content Reference

M

Target Key

5563