VCTR-67-000055 - The vCenter Server must configure the vSAN Datastore name to a unique name.

Information

A vSAN Datastore name by default is 'vsanDatastore'. If more than one vSAN cluster is present in vCenter, both datastores will have the same name by default, potentially leading to confusion and manually misplaced workloads.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

From the vSphere Client, go to Hosts and Clusters >> select a vSAN Enabled Cluster >> Datastores.

Right-click on the datastore named 'vsanDatastore' and select 'Rename'.

Rename the datastore based on site-specific naming standards.

or

From a PowerCLI command prompt while connected to the vCenter server, run the following command:

If($(Get-Cluster | where {$_.VsanEnabled} | Measure).Count -gt 0){
Write-Host 'vSAN Enabled Cluster found'
$Clusters = Get-Cluster | where {$_.VsanEnabled}
Foreach ($clus in $clusters){
$clus | Get-Datastore | where {$_.type -match 'vsan'} | Set-Datastore -Name $(($clus.name) + '_vSAN_Datastore')
}
}
else{
Write-Host 'vSAN is not enabled, this finding is not applicable'
}

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_Y23M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-243111r879887_rule, STIG-ID|VCTR-67-000055, Vuln-ID|V-243111

Plugin: VMware

Control ID: 88d5e2fa885bb7080ef69985330e2625895902e5ea4d0bf424f7b1a30f803d83