Configure Advanced Security Settings on the vCenter Server Instances for Compliance with NIST 800-53 in Region A

You enable SSL for the Network File Copy function and configure the password length for the built-in vpxuser.

When you run commands, on the prompts to specify the object of a command, enter [A] Yes to All to run a task on all hosts that belong to the vCenter Server instance that you configure.

Procedure

1. Log in to the Management vCenter Server by using a PowerCLI console.

   Setting	Value
   Command	Connect-VIServer -Server sfo01m01vc01.sfo01.rainpole.local -Protocol https
   User name	[e-mail]
   Password	vsphere_admin_password

2. NIST80053-VI-VC-CFG-00437 Enable SSL for the Network File Copy function.

   New-AdvancedSetting -Entity  sfo01m01vc01.sfo01.rainpole.local -Name config.nfc.useSSL -Value true

3. NIST80053-VI-VC-CFG-00427Change the length of the password for the built-in vpxuser account to 32 characters.

   New-AdvancedSetting -Entity sfo01m01vc01.sfo01.rainpole.local -Name config.vpxd.hostPasswordLength -Value 32

4. Log in to the sfo01w01vc01.sfo01.rainpole.local Compute vCenter Server and repeat the procedure for the shared edge and compute cluster.