vSphere Security

@VMware Twitter account for #vSphere Security

[vSphere Security @vSphereSecurity]

@jwmoss @Ask_Spectrum @mikefoley Dammit. Thanks. Fixed.

[VMware vSphere Foundation @VMwarevSphere]

#vSphereChat: Are you wondering where to register for #vForumOnline? Here’s the link! https://t.co/EaTfaUNjM1

[VMware vSphere Foundation @VMwarevSphere]

(If you haven’t yet, register to attend here: https://t.co/VRAUHUj4lu). Feel free to to ask our experts a question at anytime using the #vSphereChat hashtag.

[VMware vSphere Foundation @VMwarevSphere]

Microsoft has changed their intentions for the March 2020 Active Directory LDAP updates. Here's how it affects your vSphere infrastructure: https://t.co/FhO5bhGunK

[vSphere Security @vSphereSecurity]

Here’s an update from Microsoft on the LDAPS issue.

https://t.co/jrBGnGYpNv

TL;DR It’s been put off until H2 calendar year 2020.

The vSphere blog entry will be updated soon.

https://t.co/DYQTNgzoSc

[Mike Foley @mikefoley]

Check out this great updated blog from @plankers on the LDAP changes to AD and how it may affect vSphere. We both worked with Engineering closely to ensure we get you the correct info.

Great job Bob! (Can he blog it? Yes he can!)

https://t.co/UF4d1xGhfI

[vSphere Security @vSphereSecurity]

This is a MUST READ if you are running vSphere under compliance mandates.

PCI and NIST 800-53 VMware Validated Design compliance kits now available FOR FREE.

Get started NOW!

Amazing job by Jerry’s team and @_CarlosPhoenix !

[Mike Foley @mikefoley]

VMware Validated Designs for PCI and NIST 800-53 are now available!

Go to https://t.co/9I82SMGpvz and look over there on the left.

Download the FREE compliance kits!

PCI: https://t.co/etAHXl3B0G

800-53: https://t.co/5P1REiGF3j

[vSphere Security @vSphereSecurity]

@Ravi49575050 @mikefoley You would have to copy the vm.nvram file and use the same KMS key

[vSphere Security @vSphereSecurity]

What you need to know about the latest CPU threats and vSphere. This is a MUST READ folks!

https://t.co/AHPnhaVTk0

[vSphere Security @vSphereSecurity]

ESXi 6.7 Update 2 is now Common Criteria certified! More info on the NIAP website: https://t.co/xhjqUJvgQx

[vSphere Security @vSphereSecurity]

Another #VMworld season over. Off to the airport to head home for the weekend. Then back on a plane to HQ Monday.

[⍼ John Nicholson ⍼ @Lost_Signal]

Security AMA is Live! with @plankers and @mikefoley https://t.co/Wo47LxPwd1

[VMware vSphere Foundation @VMwarevSphere]

Tomorrow, 10/22 @ 10AM PST, join our #vSphereChat to discuss the importance of being #CyberSmart beyond National Cybersecurity Awareness Month. We can't wait to see you there! https://t.co/Hhc9c1tDBQ

[Mike Foley @mikefoley]

Myself and @plankers are hosting a vSphere Security tweet chat tomorrow, Oct 22nd 10-11amPDT in honor of national cybersecurity month. Join us!

[vSphere Security @vSphereSecurity]

Issues of encryption can morph to “compliance” vs “Security”.

e.g.

“Is your data encrypted? Yes [  ]  No [  ]”

Nobody asked “How” and “against what threat vectors”.

[vSphere Security @vSphereSecurity]

Encryption (Enc) tidbit of the day. Was asked about database encryption vs vSphere encryption.

VM Enc protects against theft of the VM &/or the disk.

vSAN Enc protects against theft of disks.

Database Enc protects against SQL attacks.

Different threats & attack vectors.

[⍼ John Nicholson ⍼ @Lost_Signal]

Reddit AMA with @mikefoley and @plankers OCT23rd is a go! https://t.co/Wo47LxPwd1

[vSphere Security @vSphereSecurity]

If SGX and the next level of VM security is on your radar you should go to this session at VMworld!

[Mike Foley @mikefoley]

Probably one of the coolest VM security sessions at VMworld is “SGX Secure Enclaves:The Future of Application Security in the Cloud”

It will give you a good idea of where things are heading & what we are investigating. Check it out if you’re at VMworld!

https://t.co/GFBOqp0XHL

[Mike Foley @mikefoley]

In vSphere 6.7U3 only members of the Administrators group can change VC plugin settings. This is a (good) change from previous versions.

If developing your own plugin you can still add custom RBAC roles.

This change is for those plugins that don’t have separate RBAC controls.

[vSphere Security @vSphereSecurity]

Is vSphere Compliance your thing?

Check out this blog on our new Compliance Kit for NIST 800-53!

https://t.co/uayoTnfVAA