Similar pages:
ESXi – Hardening
VM Hardening
vCenter Hardening
– In-Guest Hardening –
Remove unnecessary virtual hardware devices from the VM.
Enable secure boot for guest OSes to prevent/detect malware.
Disable Appinfo information gathering.
Deployed VMs that are not intended to be templates should be prevented from being recustomized.
Ensure that VMware Tools are updated.
Get-VM | Select-Object -Property Name,@{Name='ToolsVersion';Expression={$_.Guest.ToolsVersion}}Ensure that all virtual machine hardware is version 11 or newer.
(Get-VM | Get-View) | Select-Object -Property Name,@{Name='HW Version';Expression={$_.Config.Version}}Activate Automated upgrade for Vmware Tools