VCSA-70-000060 - The vCenter Server must require multifactor authentication.

Information

Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.

Multifactor authentication requires using two or more factors to achieve authentication.

Factors include:
(i) something a user knows (e.g., password/PIN);
(ii) something a user has (e.g., cryptographic identification device, token); or
(iii) something a user is (e.g., biometric).

Satisfies: SRG-APP-000149, SRG-APP-000080, SRG-APP-000150, SRG-APP-000391, SRG-APP-000402

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

To configure smart card authentication for vCenter when using the embedded identity provider, refer to the supplemental document.

For vCenter Servers using a third-party identity provider, consult the product's documentation for enabling multifactor authentication.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_7-0_Y24M01_STIG.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY, IDENTIFICATION AND AUTHENTICATION

References: 800-53|AU-10, 800-53|IA-2(1), 800-53|IA-2(2), 800-53|IA-2(12), 800-53|IA-8(1), CAT|II, CCI|CCI-000166, CCI|CCI-000765, CCI|CCI-000766, CCI|CCI-001953, CCI|CCI-002009, Rule-ID|SV-256324r885583_rule, STIG-ID|VCSA-70-000060, Vuln-ID|V-256324

Plugin: VMware

Control ID: 12f05237977c491817ad46f3d1b2d2e689e5e63f3d9127ec0438654481985a53