What changed in VMware vRealize Automation 7.x vIDM STIG V1R2V1R2 changes

VMware vRealize Automation 7.x vIDM STIG V1R2 (2023-10-25) replaced V1R1 (2018-09-28): 8 checks added, 7 removed. It has 8 checks, against 7 in V1R1.

V1R2 checklistV1R1 checklist Compare V1R1 and V1R2 in STIG Compare

  • 8 added
  • 7 removed
  • 0 updated

Added in V1R2 (8)

  • V-240969CAT IIvIDM must be configured to log activity to the horizon.log file.
  • V-240970CAT IIvIDM must be configured correctly for the site enterprise user management system.
  • V-240971CAT IvIDM must utilize encryption when using LDAP for authentication.
  • V-240972CAT IIvIDM must be configured to provide clustering.
  • V-240973CAT IIvIDM must be configured to log activity to the horizon.log file.
  • V-240974CAT IvIDM, when installed in a MAC I system, must be in a high-availability (HA) cluster.
  • V-240975CAT IIThe vRealize Automation appliance must be configured in accordance with the security configuration settings based on DoD security configuration or implementation guidance, including STIGs, NSA configuration guides, CTOs, and DTMs.
  • V-258456CAT IThe version of vRealize Automation 7.x vIDM running on the system must be a supported version.

Removed since V1R1 (7)

  • V-90283CAT IIvIDM must be configured to log activity to the horizon.log file.
  • V-90285CAT IIvIDM must be configured correctly for the site enterprise user management system.
  • V-90287CAT IvIDM must utilize encryption when using LDAP for authentication.
  • V-90289CAT IIvIDM must be configured to provide clustering.
  • V-90291CAT IIvIDM must be configured to log activity to the horizon.log file.
  • V-90293CAT IvIDM, when installed in a MAC I system, must be in a high-availability (HA) cluster.
  • V-90295CAT IIThe vRealize Automation appliance must be configured in accordance with the security configuration settings based on DoD security configuration or implementation guidance, including STIGs, NSA configuration guides, CTOs, and DTMs.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R2 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.