ESXI-65-000044 - The ESXi host must enable kernel core dumps.

Information

In the event of a system failure, the system must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes.

Solution

From the vSphere Web Client select the ESXi Host and right click. Select the 'Add Diagnostic Partition' option configure a core dump diagnostic partition.

or

From a PowerCLI command prompt while connected to the ESXi host run at least one of the following sets of commands:

To configure a core dump partition:

$esxcli = Get-EsxCli
#View available partitions to configure
$esxcli.system.coredump.partition.list()
$esxcli.system.coredump.partition.set($null,'PartitionName',$null,$null)

To configure a core dump collector:

$esxcli = Get-EsxCli
$esxcli.system.coredump.network.set($null,'vmkernel port to use',$null,'CollectorIP','CollectorPort')
$esxcli.system.coredump.network.set($true)

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-5_Y23M07_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-24, CAT|III, CCI|CCI-001665, Rule-ID|SV-207645r379318_rule, STIG-ID|ESXI-65-000044, STIG-Legacy|SV-104121, STIG-Legacy|V-94035, Vuln-ID|V-207645

Plugin: Unix

Control ID: 588972953d5eb33f53395ca07070c76bdfe00a1209c76d9f3a3f244e5f61cf1f