STIGQter: STIG Summary: VMware vSphere 8.0 Virtual Machine Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 01 Aug 2024:

Virtual machines (VMs) must remove unneeded parallel devices.

DISA Rule

SV-258724r959010_rule

Vulnerability Number

V-258724

Group Title

SRG-OS-000480-VMM-002000

Rule Version

VMCH-80-000211

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.

The VM must be powered off to remove a parallel device.

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:

$pport = (Get-VM -Name <vmname>).ExtensionData.Config.Hardware.Device | Where {$_.DeviceInfo.Label -match "Parallel"}
$spec = New-Object VMware.Vim.VirtualMachineConfigSpec
$spec.DeviceChange += New-Object VMware.Vim.VirtualDeviceConfigSpec
$spec.DeviceChange[-1].device = $pport
$spec.DeviceChange[-1].operation = "remove"
(Get-VM -Name <vmname>).ExtensionData.ReconfigVM($spec)

Check Contents

Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:

Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match "parallel"}

If a virtual machine has a parallel device present, this is a finding.

Vulnerability Number

V-258724

Documentable

False

Rule Version

VMCH-80-000211

Severity Override Guidance

Check Content Reference

Target Key

5563