8.4.24 Disable VM Console Copy operations

Information

Disable VM console copy and paste operations.

*Rationale*

Copy and paste operations are disabled by default; however, by explicitly disabling this
feature, it will enable audit controls to check that this setting is correct.

Solution

To implement the recommended configuration state, run the following PowerCLI
command-# Add the setting to all VMs
Get-VM | New-AdvancedSetting -Name 'isolation.tools.copy.disable' -value $true

Impact-This is the default setting so functionality remains the same. If you require copy and paste
operations, you must enable them using the vSphere Client.

Default Value-The prescribed state is the default state.

See Also

https://workbench.cisecurity.org/files/145

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7

Plugin: VMware

Control ID: 2140f5beac7a7a075cddf2748e4a5511d6202babf93f14f35035cf3939cc6ef5