The vCenter Server must disable Secure Shell (SSH) access.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-258968	VCSA-80-000303	SV-258968r934562_rule		Medium

Description
vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary. vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.

STIG	Date
VMware vSphere 8.0 vCenter Security Technical Implementation Guide	2023-10-11

Details

Check Text ( C-62708r934560_chk )
Open the Virtual Appliance Management Interface (VAMI) by navigating to https://:5480. Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the "SystemConfiguration.BashShellAdministrator" group. Select "Access" on the left navigation pane. If "SSH Login" is not "Deactivated", this is a finding.

Fix Text (F-62617r934561_fix)
Open the Virtual Appliance Management Interface (VAMI) by navigating to https://:5480. Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the "SystemConfiguration.BashShellAdministrator" group. Select "Access" on the left navigation pane. Click "Edit" then disable "Activate SSH Login" and click "OK".