STIGQter STIGQter: STIG Summary:

VMware vSphere 8.0 vCenter Appliance Lookup Service Security Technical Implementation Guide

Version: 2

Release: 2 Benchmark Date: 01 Jul 2026

CheckedNameTitle
SV-259037r960735_ruleThe vCenter Lookup service must limit the number of maximum concurrent connections permitted.
SV-259038r1137578_ruleThe vCenter Lookup service cookies must have secure flag set.
SV-259039r960888_ruleThe vCenter Lookup service must initiate session logging upon startup.
SV-259040r960891_ruleThe vCenter Lookup service must produce log records containing sufficient information regarding event details.
SV-259041r960930_ruleThe vCenter Lookup service logs folder permissions must be set correctly.
SV-259042r960960_ruleThe vCenter Lookup service must limit privileges for creating or modifying hosted application shared files.
SV-259043r960963_ruleThe vCenter Lookup service must disable stack tracing.
SV-259044r1043177_ruleThe vCenter Lookup service must be configured to use a specified IP address and port.
SV-259045r1043180_ruleThe vCenter Lookup service must be configured to limit data exposure between applications.
SV-259046r961122_ruleThe vCenter Lookup service must be configured to fail to a known safe state if system initialization fails.
SV-259047r961158_ruleThe vCenter Lookup service must set URIEncoding to UTF-8.
SV-259048r961167_ruleThe vCenter Lookup service "ErrorReportValve showServerInfo" must be set to "false".
SV-259049r1043182_ruleThe vCenter Lookup service must set an inactive timeout for sessions.
SV-259050r1210406_ruleThe vCenter Lookup service must off-load log records onto a different system or media from the system being logged.
SV-259051r961863_ruleThe vCenter Lookup service must enable "STRICT_SERVLET_COMPLIANCE".
SV-259052r960735_ruleThe vCenter Lookup service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive.
SV-259053r960735_ruleThe vCenter Lookup service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive.
SV-259054r1210408_ruleThe vCenter Lookup service must configure the "setCharacterEncodingFilter" filter.
SV-259055r1137578_ruleThe vCenter Lookup service cookies must have "http-only" flag set.
SV-259056r1137578_ruleThe vCenter Lookup service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands.
SV-259057r960963_ruleThe vCenter Lookup service shutdown port must be disabled.
SV-259058r960963_ruleThe vCenter Lookup service debug parameter must be disabled.
SV-259059r960963_ruleThe vCenter Lookup service directory listings parameter must be disabled.
SV-259060r960963_ruleThe vCenter Lookup service deployXML attribute must be disabled.
SV-259061r960963_ruleThe vCenter Lookup service must have Autodeploy disabled.
SV-259062r960963_ruleThe vCenter Lookup service xpoweredBy attribute must be disabled.
SV-259063r960963_ruleThe vCenter Lookup service example applications must be removed.
SV-259064r960963_ruleThe vCenter Lookup service default ROOT web application must be removed.
SV-259065r960963_ruleThe vCenter Lookup service default documentation must be removed.
SV-259066r961461_ruleThe vCenter Lookup service files must have permissions in an out-of-the-box state.
SV-259067r961863_ruleThe vCenter Lookup service must disable "ALLOW_BACKSLASH".
SV-259068r961863_ruleThe vCenter Lookup service must enable "ENFORCE_ENCODING_IN_GET_WRITER".
SV-259069r960963_ruleThe vCenter Lookup service manager webapp must be removed.
SV-259070r1003622_ruleThe vCenter Lookup service host-manager webapp must be removed.