The vCenter Server must disable the Customer Experience Improvement Program (CEIP).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-243122	VCTR-67-000067	SV-243122r719609_rule		Medium

Description
The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes, this feature must be disabled.

STIG	Date
VMware vSphere 6.7 vCenter Security Technical Implementation Guide	2022-09-09

Details

Check Text ( C-46397r719607_chk )
From the vSphere Client, go to Administration >> Deployment >> Customer Experience Improvement Program. If Customer Experience Improvement "Program Status" is "Joined", this is a finding.

Fix Text (F-46354r719608_fix)
From the vSphere Client, go to Administration >> Deployment >> Customer Experience Improvement Program. Click the "Leave" button.