vSphere Hardening – G4 : Disable Authorized (SSH) Keys

Guideline ID : ESXi.remove-authorized-keys

Vulnerability Discussion : ESXi hosts come with SSH which can be enabled to allow remote access without requiring user authentication.  To enable password free access copy the remote users public key into the "/etc/ssh/keys-root/authorized_keys" file on the ESXi host.  The presence of the remote user's public key in the "authorized_keys" file identifies the user as trusted, meaning the user is granted access to the host without providing a password.  If using Lockdown Mode and SSH is disabled then login with authorized keys will have the same restrictions as username/password. This is a change enacted in 5.1 … Read The Rest ......



via Latest imported feed items on VMware Blogs https://ift.tt/2IJJ4s4
RSS Feed

If New feed item from https://blogs.vmware.com/feed, then send me an email at kr

IFTTT

Comments

Post a Comment

Popular posts from this blog

The best air conditioner

Image
By Liam McCabe This post was done in partnership with Wirecutter . When readers choose to buy Wirecutter's independently chosen editorial picks, it may earn affiliate commissions that support its work. Read the full article here . After six summers of researching, testing, and recommending window air conditioners, we've learned that quiet and affordable ACs make most people the happiest—and we think the LG LW8016ER will fit the bill in most rooms. This 8,000 Btu unit cools as efficiently and effectively as any model with an equal Btu rating, and runs at a lower volume and deeper pitch than others at this price. Little extra features like a fresh-air vent, two-axis fan blades, and a removable drain plug help set it apart, too. The LG LW8016ER is a top choice for an office or den, and some people will find it quiet enough for a bedroom, too. If our main pic...
Read more

Sprint will give free data to Snapdragon PCs

Image
It's official. Sprint is definitely giving away free unlimited LTE data through 2018 to those who use laptops packing Qualcomm's Snapdragon 835 processor. We first learned of this last month , and the announcement today clarifies which devices qualify. If you own or buy the HP Envy X2 , ASUS NovaGo or Lenovo Miix 630 , you'll be able to get free unlimited data if you sign up for AutoPay with the carrier. This won't cover devices using the new Snapdragon 850 chipset , although that's not available in an actual computer yet, and we'll possibly hear more later this year. Always-available data connectivity is perhaps the biggest selling point of Windows on Snapdragon devices, which promise gigabit LTE speeds wherever you are. While it would be nice to see other carriers offer similar deals, just to have an alternative option, this offer makes these...
Read more

ASUS VivoWatch BP keeps track of your blood pressure and location

Image
ASUS may well have pulled out of the Android smartwatch market after its ZenWatch 3 , but it's actually not quite done yet with wearables. At Computex, the company made a little surprise by unveiling the VivoWatch BP, which is a follow-up to the original low-power VivoWatch from three years ago. We're looking at a handful of new features and improvements here, with the main highlight being the built-in blood pressure monitor -- a rare feature in the smartwatch category. The only other recent direct competitor is the Omron HeartGuide , which is also due to lau nch later this year. The VivoWatch BP won't be winning praises for its appearance. While the previously monochromatic high-reflective display has now gained some colors, it's also gained a much thicker bezel to accommodate extra sensors on the front. The screen is positioned i...
Read more