The vCenter Server must disable the Customer Experience Improvement Program (CEIP).
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-258930 | VCSA-80-000248 | SV-258930r934448_rule | CCI-000366 | medium |
| Description | ||||
| The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes, this feature must be disabled. | ||||
| STIG | Date | |||
| VMware vSphere 8.0 vCenter Security Technical Implementation Guide | 2023-10-11 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
CM-6
1.00
- DISA · V1R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.4.1
1.00
- DISA · V1R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.4.2
1.00
- DISA · V1R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000366
1.00
- DISA · V1R1 · disa_xccdf · related
Details
Check Text (C-258930r934448_chk)
From the vSphere Client, go to Administration >> Deployment >> Customer Experience Improvement Program.
If Customer Experience Improvement "Program Status" is "Joined", this is a finding.
Fix Text (F-62579r934447_fix)
From the vSphere Client, go to Administration >> Deployment >> Customer Experience Improvement Program.
Click "Leave Program".