STIGQter: STIG Summary: VMware vRealize Operations Manager 6.x tc Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

tc Server ALL must validate client certificates, to include all intermediary CAs, to ensure the client-presented certificates are valid and that the entire trust chain is valid. If PKI is not being used, this check is Not Applicable.

DISA Rule

SV-99599r1_rule

Vulnerability Number

V-88949

Group Title

SRG-APP-000175-WSR-000095

Rule Version

VROM-TC-000460

Severity

CAT II

CCI(s)

• CCI-000185 - The information system, for PKI-based authentication, validates certifications by constructing and verifying a certification path to an accepted trust anchor including checking certificate status information.

Weight

10

Fix Recommendation

Validate client certificates are being validated in accordance with RFC 5280.

Check Contents

Obtain supporting documentation from the ISSO.

Review tc Server ALL configuration to verify that certificates being provided by the client are being validated in accordance with RFC 5280. If PKI is not being used, this is NA.

If certificates are not being validated in accordance with RFC 5280, this is a finding.

Vulnerability Number

V-88949

Documentable

False

Rule Version

VROM-TC-000460

Severity Override Guidance

Obtain supporting documentation from the ISSO.

Review tc Server ALL configuration to verify that certificates being provided by the client are being validated in accordance with RFC 5280. If PKI is not being used, this is NA.

If certificates are not being validated in accordance with RFC 5280, this is a finding.

Check Content Reference

M

Target Key

3441

Comments