The Update Manager must not be configured to manage its own VM or the VM of its vCenter Server.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| VCENTER-000003 | VCENTER-000003 | VCENTER-000003_rule | Medium |
| Description |
|---|
| The VMware Update Manager and vCenter Server are VM installable on an ESXi host. The Update Manager must not be configured to manage the updates on either of those VMs. |
| STIG | Date |
|---|---|
| VMware vCenter Server Security Technical Implementation Guide | 2013-01-15 |
Details
| Check Text ( C-VCENTER-000003_chk ) |
|---|
| Ask the SA if either the VMware Update Manager and/or vCenter Server are installed as VMs rather than physical machines. If either the VMware Update Manager and/or vCenter Server are installed as VMs, this is a finding. |
| Fix Text (F-VCENTER-000003_fix) |
|---|
| Ensure both the VMware Update Manager and vCenter Server are installed as physical machines. |