The Security Token Service must be configured with the appropriate ports.

An XCCDF Rule

Description

Web servers provide numerous processes, features, and functionalities that use TCP/IP ports. Some of these processes may be deemed unnecessary or too unsecure to run on a production system. The ports that the Security Token Service listens on are configured in the "catalina.properties" file and must be verified as accurate to their shipping state.

ID: SV-256771r918979_rule
Version: VCST-70-000028
Severity: Medium
References: CCI-001762
Updated: about 2 months ago

Remediation Templates

Navigate to and open:

/usr/lib/vmware-sso/vmware-sts/conf/catalina.properties

Navigate to the ports specification section.
Set the Security Token Service port specifications according to the following list:

bio-custom.http.port=7080
bio-custom.https.port=8443
bio-ssl-clientauth.https.port=3128
bio-ssl-localhost.https.port=7444

Restart the service with the following command:

# vmon-cli --restart sts

The Security Token Service must be configured with the appropriate ports.

Description

Remediation Templates

A Manual Procedure