VMWare vRealize Automation 7.x STIG Y21M07 Checklist Details (Checklist Revisions)

Supporting Resources:


Target CPE Name
VMWare vRealize Automation 7.x cpe:/a:vmware:vrealize_automation:7.0 (View CVEs)

Checklist Highlights

Checklist Name:
VMWare vRealize Automation 7.x STIG
Checklist ID:
Review Status:
Governmental Authority: Defense Information Systems Agency
Original Publication Date:

Checklist Summary:

The VMware vRealize Automation (vRA) 7.x Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DoD) information systems. This document is meant for use in conjunction with other STIGs such as the Enclave, Network Infrastructure, Secure Remote Computing, and appropriate operating system (OS) STIGs. The vRA 7.x STIG is composed of eight sub-component STIGs. All component STIGs must be applied to the vRA 7.x environment: • Application – vRA application • HAProxy – Proxy component • Lighttpd – Web Server component • PostgreSQL – Database component • SLES – Operating System component • tc Server – Web Server component • vAMI – Appliance Management Interface • vIDM – Identity Manager vRA 7.x-specific STIGs are to be used for components where other STIGs exist.

Checklist Role:

  • Virtualization Server

Known Issues:

Not provided.

Target Audience:

Not provided.

Target Operational Environment:

  • Managed
  • Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

DoDI 8500.01.


Parties within the DoD and Federal Government’s computing environments can obtain the applicable STIG from the Information Assurance Support Environment (IASE) website. This site contains the latest copies of any STIGs, SRGs, and other related security information. The address for the IASE site is http://iase.disa.mil/.


Not provided.

Product Support:

Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil. DISA will coordinate all change requests with the relevant DoD organizations before inclusion in this document. Approved changes will be made in accordance with the DISA maintenance release schedule.

Point of Contact:



Not provided.


Not provided.

Change History:

New Checklist - 10/31/18
Updated to FINAL - 12/3/18
Updated URLs - 6/25/19
Updated URLs - 8/14/19
updated URLs - 7/28/21


URL Description


Reference URL Description

NIST checklist record last modified on 07/28/2021