VMware's official guide in its updated version for ESX 3.5 and VirtualCenter 2.5 is the more current alternative to the more thorough Department of Defense STIG. A must read when you upgrade.