Hardening is the process of securing a system, a service, or an entire infrastructure, by reducing the attack surface and minimizing the possible vulnerabilities. VMware has built Security Hardening Guides, which can found at https://www.vmware.com/security/hardening-guides.html, to provide prescriptive guidance for customers on how to deploy and operate VMware products in a secure manner.

The vSphere 6.7 Security Configuration Guide is a spreadsheet file with several guidelines classified with a risk profile, useful as a checklist for tuning, with rich metadata for guideline classification and risk assessment. There are also some example scripts for enabling security automation. For more information on how to read them and how the guidelines have changed since the previous release, see https://blogs.vmware.com/vsphere/2018/11/announcing-the-vsphere-6-7-update-1-security-configuration-guide.html.