STIGQter: STIG Summary: VMware vRealize Automation 7.x tc Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

tc Server ALL must validate client certificates, to include all intermediary CAs, to ensure the client-presented certificates are valid and that the entire trust chain is valid.

DISA Rule

SV-100691r1_rule

Vulnerability Number

V-90041

Group Title

SRG-APP-000175-WSR-000095

Rule Version

VRAU-TC-000445

Severity

CAT II

CCI(s)

• CCI-000185 - The information system, for PKI-based authentication, validates certifications by constructing and verifying a certification path to an accepted trust anchor including checking certificate status information.

Weight

10

Fix Recommendation

If PKI is not being used, this check is Not Applicable.

Validate client certificates in accordance with RFC 5280.

Check Contents

If PKI is not being used, this check is Not Applicable.

Interview the ISSO.

Review tc Server ALL configuration to verify that certificates being provided by the client are being validated in accordance with RFC 5280.

If certificates are not being validated in accordance with RFC 5280, this is a finding.

Vulnerability Number

V-90041

Documentable

False

Rule Version

VRAU-TC-000445

Severity Override Guidance

If PKI is not being used, this check is Not Applicable.

Interview the ISSO.

Review tc Server ALL configuration to verify that certificates being provided by the client are being validated in accordance with RFC 5280.

If certificates are not being validated in accordance with RFC 5280, this is a finding.

Check Content Reference

M

Target Key

3439

Comments