VxRail: Security Technical Implementation Guide on VxRail

VxRail STIG Hardening Package version 3.0.203 is now available for download for supported builds.  

The VxRail STIG Hardening Package contains scripts and manual procedures which enable VxRail customers to harden their VxRail in compliance with relevant Department of Defense (DoD) Security Technical Implementation Guidelines (STIG) requirements.

Updates:

• Resolved an issue where SSH commands in some environments triggered key‑exchange and password prompts that only accepted manual input.

VxRail Support:

• VxRail STIG Hardening Package v3.0.203 will be the final build supporting VxRail 7.0.x. VxRail validated security patches on 7.0.x will be supported with reasonable effort retroactively on v3.0.203.

The VxRail STIG Hardening Package supports standard VxRail deployments including:

• Internal and external DNS (starting with 2.3.000)
• 2-node clusters with VMware vSAN (starting with 2.4.000)
• Stretched cluster with VMware vSAN with virtual witness node (starting with 2.4.000)

VxRail STIG Hardening Package does not support:

• Customer-managed or External VMware vCenter Server
• VxRail stretched cluster with a physical witness node.
• VxRail satellite nodes
• VxRail 2-node vSAN based on VxRail VD Series (ruggedized) nodes.
• VxRail STIG hardening for resource management software operated alongside VxRail, including:
  • VCF
  • VMware NSX
  • SDDC Manager

Users can implement the STIG Hardening Package in one of two ways:

• Dell Deployment Services installation of the STIG Hardening Package (see CAUTION below)
  • If you prefer the VxRail STIG Hardening Package to be installed as a service, contact your Dell Technologies sales team representative for a custom deployment services quote.

Self-installation of the STIG Hardening Package (see CAUTION below)

• The VxRail STIG Hardening Package and documentation are available for download from the following links. Login to a support account is required to access:
  • VxRail STIG Hardening Package
  • VxRail STIG Hardening Guide
  • VxRail STIG Assessment Index

• The downloadable STIG Hardening Package is for self-installation only. The Support Services team is not authorized to provide instructional information about STIG Hardening. After reviewing the STIG Hardening Package documentation, if you are uncertain about the execution methods, we recommend contacting your Dell Technologies sales team representative for a custom deployment services quote.