← Back to ISEC7 Sphere Security Technical Implementation Guide

V-224775

CAT II (Medium)

The ISEC7 SPHERE, Tomcat installation, and ISEC7 Suite monitor must be configured to use the Windows Trust Store for the storage of digital certificates and keys.

Rule ID

SV-224775r1013838_rule

STIG

ISEC7 Sphere Security Technical Implementation Guide

Version

V3R1

CCIs

CCI-000366

Discussion

A trust store provides requisite encryption and access control to protect digital certificates from unauthorized access.

Check Content

Log in to the ISEC7 SPHERE Console.
Navigate to Administration >> Configuration >> Apache Tomcat Settings.
Verify that the type of Keystore being used is: Windows-MY 

If the type of Keystore being used is not Windows-MY, this is a finding.

Fix Text

Log in to the ISEC7 SPHERE Console.
Navigate to Administration >> Configuration >> Apache Tomcat Settings.
Select the type of Keystore to be used as: 
Windows-MY
Restart the ISEC7 SPHERE Web service.