Table Of Contents - VMware VCM 5.3 - CONFIGURATION MANAGER SECURITY ENVIRONMENT REQUIREMENTS Configuration

Table of Contents

1.0 Introduction to The Security Environment of VCM
2.0 Background Concepts
3.0 Secure Domain Infrastructure
3.1 Domain controller is trusted
3.2 Network infrastructure is secure
3.3 Network infrastructure services are available
3.4 'Trusted' certificates, certificate authorities, and certificate servers are trusted
3.5 Network infrastructure hosts are at least as secure as VCM
4.0 Hosting Environment
4.1 VCM servers are secured and managed like network infrastructure
4.2 UI Zone machines should be subject to access controls
4.3 Data originating from a managed machine is no more trustworthy than the machine
4.4 Server zone machine dedicated to VCM
5.0 Personnel Selection and Training
5.1 VCM accounts are granted to users who are trusted, trained, and qualified as system and net-
work administrators
5.2 VCM users are advised to treat direct login prompts to VCM with skepticism and caution
5.3 VCM users must protect collected data as confidential information
5.4 Trust individual collection results no more than their source
5.5 Beware of cross-site scripting attacks
5.6 Exported data is outside the control of VCM
6.0 Host Preparation and Management
6.1 VCM hosts pass Foundation Checker checks
6.2 Cryptographic service providers are FIPS-140 certified
6.3 SQL Server best practices are followed
6.4 Only trusted software should be installed in the server zone
6.5 Perform routine backups, patches, and virus scanning
7.0 Safeguarding Installation Kits
vCenter Configuration Manager Security Environment Requirements
10
11
11
11
12
12
13
13
13
13
13
14
14
15
15
15
16
16
16
17
TECHNICAL WHITE PAPER / 2
5
6
9
9
9
9
9