The Microsoft SCOM server must be running Windows operating system that supports modern security features such as virtualization based security.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-237432	SCOM-CM-000001	SV-237432r643942_rule		High

Description

Network devices running older but supported operating systems lack modern security features that mitigate attack surfaces. Attackers face a higher level of complexity to overcome during a compromise attempt.

STIG	Date
Microsoft SCOM Security Technical Implementation Guide	2021-03-15

Details

Check Text (C-40651r663057_chk)

Check the operating system version.

From the SCOM management servers, type winver and press enter. If the operating system is not Windows Server 2016 or later, this is a finding.

Fix Text (F-40614r643941_fix)

Upgrade the network device to an operating that supports modern security features such as virtualization based security.