Information
Use a hardened base operating system template image to create application-specific templates, and use the application-specific templates to deploy virtual machines.
Rationale:
By capturing a hardened base operating system image (with no applications installed) in a template, you can ensure that all your virtual machines are created with a known baseline level of security. Manual installation of the OS and applications into a VM introduces the risk of misconfiguration due to human or process error.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
To change current practices so templates are used whenever possible to deploy VMs, perform whichever of the following steps is appropriate:
Create templates and configure them properly
Alter standard procedures and processes to use the templates
Also, ensure that the applications do not depend on information specific to the VM to be deployed.
References:
https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.vm_admin.doc/GUID-8254CD05-CC06-491D-BA56-A773A32A8130.html
https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-3399BC47-45E8-494B-9B57-E498DD294A47.html