Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Default password for keystore must be changed.
Description
Discussion Text
Tomcat currently operates only on JKS, PKCS11, or PKCS12 format keystores. The JKS format is Java's standard "Java KeyStore" format, and is the format created by the keytool command-line utility which is included in the JDK. The PKCS12 format is an internet standard, and is managed using OpenSSL or Microsoft's Key-Manager. This requirement only applies to JKS keystores. When a new JKS keystore is created, if a password is not specified during creation the default password used by Tomcat is "changeit" (all lower case). If the default password is not changed, the keystore is at risk of compromise.
Satisfies: SRG-APP-000033-AS-000023, SRG-APP-000176-AS-000125
Satisfies: SRG-APP-000033-AS-000023, SRG-APP-000176-AS-000125
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.