Press "Enter" to skip to content

In-Guest Hardening

Similar pages:
ESXi – Hardening
VM Hardening
vCenter Hardening
– In-Guest Hardening


Remove unnecessary virtual hardware devices from the VM.


Enable secure boot for guest OSes to prevent/detect malware.


Disable Appinfo information gathering.


Deployed VMs that are not intended to be templates should be prevented from being recustomized.


Ensure that VMware Tools are updated.

Get-VM | Select-Object -Property Name,@{Name='ToolsVersion';Expression={$_.Guest.ToolsVersion}}

Ensure that all virtual machine hardware is version 11 or newer.

(Get-VM | Get-View) | Select-Object -Property Name,@{Name='HW Version';Expression={$_.Config.Version}}

Activate Automated upgrade for Vmware Tools

Was this page helpful?