STIGQter STIGQter: STIG Summary: VMware vSphere 8.0 Virtual Machine Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 01 Aug 2024:

Virtual machines (VMs) must remove unneeded serial devices.

DISA Rule

SV-258725r959010_rule

Vulnerability Number

V-258725

Group Title

SRG-OS-000480-VMM-002000

Rule Version

VMCH-80-000212

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

The VM must be powered off to remove a serial device.

For each virtual machine do the following:

From the vSphere Client, right-click the Virtual Machine and go to "Edit Settings".

Select the serial device, click the circled "X" to remove it, and click "OK".

Check Contents

For each virtual machine do the following:

From the vSphere Client, right-click the Virtual Machine and go to "Edit Settings".

Review the VMs hardware and verify no serial devices exist.

or

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:

Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match "serial"}

If a virtual machine has a serial device present, this is a finding.

Vulnerability Number

V-258725

Documentable

False

Rule Version

VMCH-80-000212

Severity Override Guidance

For each virtual machine do the following:

From the vSphere Client, right-click the Virtual Machine and go to "Edit Settings".

Review the VMs hardware and verify no serial devices exist.

or

From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:

Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match "serial"}

If a virtual machine has a serial device present, this is a finding.

Check Content Reference

M

Target Key

5563