So recently we went through a CIS audit. We use vROps (VCF Ops now) compliance module to audit our environment.
Some of the items that we are remediating include turning on some simple items, like adding an SSH connection banner, and updating the watchdog service policies.
I wrote a couple of PowerCLI scripts to accomplish this. Feel free to use them.
What this covers
- Sets a compliant SSH logon banner on ESXi hosts
- Updates ESXi watchdog service policies per CIS baseline
Usage
Download the ZIP(s) below and review the README or inline comments before running in your environment.
Continue the Conversation
Have a question, a different approach, or something you have learned from the field?
Join the VCF Insider Community to connect with other engineers, homelab builders, and virtualization folks working through real-world VCF deployments, troubleshooting, automation, architecture, and lessons learned.
