Performance Charts must not be configured with unsupported realms.
An XCCDF Rule
Description
Performance Charts performs user authentication at the application level and not through Tomcat. Depending on the vCenter Server Appliance (VCSA) version, Performance Charts may come configured with a "UserDatabaseRealm". This should be removed as part of eliminating unnecessary features.
- ID
- SV-256620r888351_rule
- Version
- VCPF-70-000010
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Navigate to and open:
/usr/lib/vmware-perfcharts/tc-instance/conf/server.xml
Remove the <Realm> node returned in the check.