VMware VCM 5.3 - CONFIGURATION MANAGER SECURITY ENVIRONMENT REQUIREMENTS Configuration page 3

7.1 VCM installation kits are obtained from VMware or secure sources
7.2 VCM installation kits are protected from tampering or verified
7.3 Unknown software publisher warnings during ClickOnce installations are not dismissed unless
the publisher is VMware
7.4 Automatic upgrade of the VCM Remote Client is not used to install software
8.0 IIS Preparation
8.1 IIS set to use Windows integrated authentication for the VCM Web site root
8.2 VCM Web Service uses HTTPS
8.3 SSL/HTTPS certificate issued by trusted CA or self Issued
9.0 SQL Server Preparation
9.1 Follow Microsoft SQL Server configuration best practices
9.2 Use delegation with a VCM split installation
9.3 Protect SQL Server from connections originating outside the server zone
9.4 Forbid direct SQL Server login by VCM users
10.0 Web Browser Preparation
10.1 Place the VCM Web host in the IE trusted zone
10.2 Verify the VCM Web host's HTTPS certificate
10.3 Verify the VCM software publisher certificate
10.4 Remove untrusted machines from the IE trusted zone
10.5 Customize Internet Explorer's trusted zone Internet security options
11.0 Agent Installation and Maintenance
11.1 File and directory access controls prevent tampering
11.2 Access control on machine configuration prevents tampering
11.3 The Agent is available for collection
11.4 The Trusted Certificate Store contains reputable certificates
11.5 The enterprise certificate authorized collection
11.6 Unauthorized (private) Agents are not allowed
11.7 Continuous possession and control of the Agent
12.0 Software Provisioning Components
12.1 All published packages are signed by trusted parties
12.2 Protect repositories
vCenter Configuration Manager Security Environment Requirements
17
17
18
18
19
19
19
19
20
20
20
20
20
21
21
21
21
21
22
23
23
23
23
24
24
24
24
25
26
26
TECHNICAL WHITE PAPER / 3