STIGQter: STIG Summary: VMW vRealize Automation 7.x vAMI Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

The vAMI sfcb server certificate must only be accessible to authenticated system administrators or the designated PKI Sponsor.

DISA Rule

SV-100921r1_rule

Vulnerability Number

V-90271

Group Title

SRG-APP-000514-AS-000136

Rule Version

VRAU-VA-000635

Severity

CAT II

CCI(s)

• CCI-002450 - The information system implements organization-defined cryptographic uses and type of cryptography required for each use in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.

Weight

10

Fix Recommendation

At the command prompt, enter the following command:

chmod 440 /opt/vmware/etc/sfcb/server.pem

Check Contents

At the command prompt, execute the following command:

ls -l /opt/vmware/etc/sfcb/server.pem

If permissions on the certificate file is not -r--r----- (440), this is a finding.

Vulnerability Number

V-90271

Documentable

False

Rule Version

VRAU-VA-000635

Severity Override Guidance

At the command prompt, execute the following command:

ls -l /opt/vmware/etc/sfcb/server.pem

If permissions on the certificate file is not -r--r----- (440), this is a finding.

Check Content Reference

M

Target Key

3449

Comments