U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

VMWare vRealize Automation 7.x STIG Y21M10 Checklist Details (Checklist Revisions)

Supporting Resources:

Target:

Target CPE Name
VMWare vRealize Automation 7.x cpe:/a:vmware:vrealize_automation:7.0 (View CVEs)

Checklist Highlights

Checklist Name:
VMWare vRealize Automation 7.x STIG
Checklist ID:
881
Version:
Y21M10
Type:
Compliance
Review Status:
Archived
Authority:
Governmental Authority: Defense Information Systems Agency
Original Publication Date:
09/28/2018

Checklist Summary:

The VMware vRealize Automation (vRA) 7.x Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DoD) information systems. This document is meant for use in conjunction with other STIGs such as the Enclave, Network Infrastructure, Secure Remote Computing, and appropriate operating system (OS) STIGs. The vRA 7.x STIG is composed of eight sub-component STIGs. All component STIGs must be applied to the vRA 7.x environment: • Application – vRA application • HAProxy – Proxy component • Lighttpd – Web Server component • PostgreSQL – Database component • SLES – Operating System component • tc Server – Web Server component • vAMI – Appliance Management Interface • vIDM – Identity Manager vRA 7.x-specific STIGs are to be used for components where other STIGs exist.

Checklist Role:

  • Virtualization Server

Known Issues:

Not provided.

Target Audience:

Not provided.

Target Operational Environment:

  • Managed
  • Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

DoDI 8500.01.

Comments/Warnings/Miscellaneous:

Parties within the DoD and Federal Government’s computing environments can obtain the applicable STIG from the Information Assurance Support Environment (IASE) website. This site contains the latest copies of any STIGs, SRGs, and other related security information. The address for the IASE site is http://iase.disa.mil/.

Disclaimer:

Not provided.

Product Support:

Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil. DISA will coordinate all change requests with the relevant DoD organizations before inclusion in this document. Approved changes will be made in accordance with the DISA maintenance release schedule.

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

New Checklist - 10/31/18
Updated to FINAL - 12/3/18
Updated URLs - 6/25/19
Updated URLs - 8/14/19
updated URLs - 7/28/21
Updated resource and sunset per DISA - 10/26/23
Updated title - 10/26/23

Dependency/Requirements:

URL Description

References:

Reference URL Description

NIST checklist record last modified on 10/26/2023