Title

The VMware-converter utility is not used for VMDK imports or exports. (Cat III impact)

Discussion

There will be situations that require the import or export of VMDK files on the VMFS partition. Importing and exporting disk files can also be done through the Virtual Infrastructure Client or service console by copying the files from VMFS mount and pasting them to a partition running ext3 file system. Utilizing the VMware-converter utility is required since the VMFS file system utilizes such large files. There are third-party converters available that may work with VMware virtual machines, however, none have been thoroughly tested or approved by VMware.

Check Content

Ask the IAO/SA how they import and export VMDK files. If they are using the VMware-converter utility, this is not a finding. If they are using a third party converter, ensure that the converter is supported by the vendor. This might require going to the vendor’s website and verifying the version used is supported. If it is not, this is a finding.

Fix Text

Use the VMware-converter for all import and export of VMDK files to VMFS partitions.

Additional Identifiers

Rule ID: SV-16830r1_rule

Vulnerability ID: V-15889

Group Title: VMware-converter utility not used for VMDK

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.