STIGQter STIGQter: STIG Summary:

VMware vSphere 8.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide

Version: 2

Release: 3 Benchmark Date: 01 Jul 2026

CheckedNameTitle
☐SV-259166r960735_ruleThe vCenter PostgreSQL service must limit the number of concurrent sessions.
☐SV-259167r960879_ruleThe vCenter PostgreSQL service must enable "pgaudit" to provide audit record generation capabilities.
☐SV-259168r960882_ruleThe vCenter PostgreSQL service configuration files must not be accessible by unauthorized users.
☐SV-259169r1210428_ruleThe vCenter PostgreSQL service must generate audit records.
☐SV-259170r960888_ruleThe vCenter PostgreSQL service must initiate session auditing upon startup.
☐SV-259171r960891_ruleThe vCenter PostgreSQL service must produce logs containing sufficient information to establish what type of events occurred.
☐SV-259172r960930_ruleThe vCenter PostgreSQL service must be configured to protect log files from unauthorized access.
☐SV-259173r960963_ruleThe vCenter PostgreSQL service must not load unused database components, software, and database objects.
☐SV-259174r1043177_ruleThe vCenter PostgreSQL service must be configured to use an authorized port.
☐SV-259175r1210434_ruleThe vCenter PostgreSQL service must require authentication on all connections.
☐SV-259176r1015952_ruleThe vCenter PostgreSQL service must encrypt passwords for user authentication.
☐SV-259179r961125_ruleThe vCenter PostgreSQL service must write log entries to disk prior to returning operation success or failure.
☐SV-259180r961167_ruleThe vCenter PostgreSQL service must provide nonprivileged users with minimal error information.
☐SV-259181r1015953_ruleThe vCenter PostgreSQL service must have log collection enabled.
☐SV-259182r961443_ruleThe vCenter PostgreSQL service must use Coordinated Universal Time (UTC) for log timestamps.
☐SV-259183r961824_ruleThe vCenter PostgreSQL service must log all connection attempts.
☐SV-259184r961830_ruleThe vCenter PostgreSQL service must log all client disconnections.
☐SV-259185r1210431_ruleThe vCenter PostgreSQL service must off-load audit data to a separate log management facility.