--- title: Security Technical Implementation Guides url: https://www.vmware.com/resources/certifications/stigs description: STIGs are proscriptive, detailed, and comprehensive hardening guides for US Department of Defense (DOD) systems, based on DOD and NIST requirements. --- # Security Technical Implementation Guides STIGs are proscriptive, detailed, and comprehensive hardening guides for US Department of Defense (DOD) systems, based on DOD and NIST requirements. [LEARN MORE](https://www.vmware.com/docs/vmw-stig-program-overview) ## DISA STIGs The official reference for DISA STIGs, once approved and published, is the US Department of Defense web site at [https://public.cyber.mil/stigs/](https://public.cyber.mil/stigs/). These are links to the DISA published guides. ### [vSphere 8](https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y25M04_STIG.zip) The VMware vSphere 8 STIG provides security policy and technical configuration requirements for the use of vSphere 8 in the DOD. - [DOWNLOAD ZIP FILE](https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y25M04_STIG.zip) ### [vSphere 7](https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_7-0_Y25M04_STIG.zip) The VMware vSphere 7 STIG provides security policy and technical configuration requirements for the use of vSphere 7 in the DOD. - [DOWNLOAD ZIP FILE](https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_7-0_Y25M04_STIG.zip) ### [NSX-T Data Center 3.x](https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_NSX-T_Y23M07_STIG.zip) The VMware NSX-T Data Center 3.x STIG provides security policy and technical configuration requirements for the use of NSX-T 3.x in the DOD. - [DOWNLOAD ZIP FILE](https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_NSX-T_Y23M07_STIG.zip) ### [NSX 4.x](https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_NSX_4-x_Y25M01_STIG.zip) The VMware NSX 4.x STIG provides security policy and technical configuration requirements for the use of NSX 4.x in the DOD. - [DOWNLOAD ZIP FILE](https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_NSX_4-x_Y25M01_STIG.zip) ## STIG Readiness Guides STIG Readiness Guides can be used to address compliance requirements while an official STIG may be in process or otherwise unable to be processed. ### [Cloud Foundation 9.x](https://github.com/vmware/dod-compliance-and-automation/tree/master/vcf/9.x) The VMware Cloud Foundation 9.x STIG Readiness Guide provides security policy and technical configuration requirements for the use of Cloud Foundation 9.x in the DOD. - [VIEW READINESS GUIDE](https://github.com/vmware/dod-compliance-and-automation/tree/master/vcf/9.x) ### [Aria Automation 8.x](https://github.com/vmware/dod-compliance-and-automation/tree/master/aria/automation/8.x/docs) The VMware Aria Automation 8.x STIG Readiness Guide provides security policy and technical configuration requirements for the use of Aria Automation 8.x in the DOD. - [VIEW READINESS GUIDE](https://github.com/vmware/dod-compliance-and-automation/tree/master/aria/automation/8.x/docs) ### [Cloud Foundation 5.x](https://github.com/vmware/dod-compliance-and-automation/tree/master/vcf/5.x/docs) The VMware Cloud Foundation 5.x STIG Readiness Guide provides security policy and technical configuration requirements for the use of Cloud Foundation 5.x in the DOD. - [VIEW READINESS GUIDE](https://github.com/vmware/dod-compliance-and-automation/tree/master/vcf/5.x/docs) ### [Cloud Director 10.4](https://github.com/vmware/dod-compliance-and-automation/tree/master/vcd/10.x/docs) The VMware Cloud Director 10.4 STIG Readiness Guide provides security policy and technical configuration requirements for the use of Cloud Director 10.4 in the DOD. - [View Readiness Guide](https://github.com/vmware/dod-compliance-and-automation/tree/master/vcd/10.x/docs) ### [Cloud Foundation 4.x](https://github.com/vmware/dod-compliance-and-automation/tree/master/vcf/4.x/docs) The VMware Cloud Foundation 4.5 STIG Readiness Guide provides security policy and technical configuration requirements for the use of Cloud Foundation 4.5 in the DOD. - [VIEW READINESS GUIDE](https://github.com/vmware/dod-compliance-and-automation/tree/master/vcf/4.x/docs) ### [Aria Operations 8.x](https://github.com/vmware/dod-compliance-and-automation/tree/master/aria/operations/8.x/docs) The VMware Aria Operations 8.x STIG Readiness Guide provides security policy and technical configuration requirements for the use of Aria Operations 8.x in the DOD. - [VIEW READINESS GUIDE](https://github.com/vmware/dod-compliance-and-automation/tree/master/aria/operations/8.x/docs) ### [Identity Manager 3.3.x](https://github.com/vmware/dod-compliance-and-automation/tree/master/vidm/3.3.x/docs) The VMware Identity Manager 3.3.x STIG Readiness Guide provides security policy and technical configuration requirements for the use of Identity Manager 3.3.x in the DOD. - [VIEW READINESS GUIDE](https://github.com/vmware/dod-compliance-and-automation/tree/master/vidm/3.3.x/docs) ### [Aria Operations for Logs 8.x](https://github.com/vmware/dod-compliance-and-automation/tree/master/aria/operations-for-logs/8.x/docs) The VMware Aria Operations for Logs 8.x STIG Readiness Guide provides security policy and technical configuration requirements for the use of Aria Operations for Logs 8.x in the DOD. - [VIEW READINESS GUIDE](https://github.com/vmware/dod-compliance-and-automation/tree/master/aria/operations-for-logs/8.x/docs) ### [Aria Suite Lifecycle 8.x](https://github.com/vmware/dod-compliance-and-automation/tree/master/aria/lifecycle/8.x/docs) The VMware Aria Suite Lifecycle 8.x STIG provides security policy and technical configuration requirements for the use of Aria Suite Lifecycle 8.x in the DOD. - [Download zip file](https://github.com/vmware/dod-compliance-and-automation/tree/master/aria/lifecycle/8.x/docs)