I have recently come across the vmwarevSphereSecurityHardeningReportCheck.pl script and have been using it in conjunction with the vSphere 5.1 Hardening Guide to secure a new installation. I am planning to utilize the guide and checker script combination to get my hardening approved so that our project can move forward. First of all, let me echo all of those that say this is an immensely helpful tool that is saving me a ton of time.
Here are the specs of the installation:
I have run the script from vMA against "profile 1", and it seems to run properly, generating the html report at the end for my review. My question is regarding several instances where the information in the checking script is in conflict with what is in the hardening guide.
I am looking for the best place to report these, and see if other issues like this have been found. I appreciate any information that anyone has.