← Back to VMware Horizon 7.13 Connection Server Security Technical Implementation Guide

V-246886

CAT II (Medium)

The Horizon Connection Server must be configured to debug level logging.

Rule ID

SV-246886r879521_rule

STIG

VMware Horizon 7.13 Connection Server Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000067

Discussion

To ensure that all security-relevant information and events are logged, the Horizon Connection Server must be configured with the "debug" logging level. This is the default value but since it could be changed to "info", this configuration must be verified and maintained.

Check Content

On the Horizon Connection Server, launch the Registry Editor. Traverse the registry tree to "HKLM\Software\VMware, Inc.\VMware VDM". Locate the "DebugEnabled" key.

If "DebugEnabled" does not exist, this is NOT a finding.

If "DebugEnabled" does not have a value of "true", this is a finding.

Fix Text

On the Horizon Connection Server, open the Start menu. Find and launch the "Set Horizon 7 Connection Server Log Levels" shortcut. The precise location will vary depending on the Windows Server version and Start menu options; type the name to find it.

In the resulting command window, select option 2, "View Debug". Press any key to exit the command prompt window.