The CustomIdentityKeyStorePassPhrase property of the Node Manager configured to support OHS must be configured for secure communication.
An XCCDF Rule
Description
Oracle Node Manager is the utility that is used to perform common operational tasks for OHS. The "CustomIdentityKeyStorePassPhrase" property is used to protect the data within the keystore. Without protection, the data within the keystore could be compromised allowing an attacker to use the certificates to gain trusted access to other systems or processes.
- ID
- SV-221423r879887_rule
- Version
- OH12-1X-000184
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
1. Open $DOMAIN_HOME/nodemanager/nodemanager.properties with an editor.
2. Search for the "CustomIdentityKeyStorePassPhrase" property.
3. Set the "CustomIdentityKeyStorePassPhrase" property to the password of the keystore that contains a valid DoD certificate for the Node Manager identity, add the property if it does not exist.