vIDM, when installed in a MAC I system, must be in a high-availability (HA) cluster.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-90293	VRAU-VI-000550	SV-100943r1_rule		High

Description
A MAC I system is a system that handles data vital to the organization's operational readiness or effectiveness of deployed or contingency forces. A MAC I system must maintain the highest level of integrity and availability. By HA clustering the application server, the hosted application and data are given a platform that is load-balanced and provided high-availability.

STIG	Date
VMW vRealize Automation 7.x vIDM Security Technical Implementation Guide	2018-10-12

Details

Check Text ( C-89985r1_chk )
If vRA is not installed in a MAC I system, this is Not Applicable. Interview the ISSO. Obtain the correct configuration for clustering used by the site. Review the vRealize Automation appliance's installation, environment, and configuration. Determine if vRA clustering has been correctly implemented. If vRA is not correctly implementing clustering, this is a finding.

Fix Text (F-97035r1_fix)
If vRA is not installed in a MAC I system, this is Not Applicable. Interview the ISSO. Obtain the correct configuration for clustering used by the site. Configure vRealize Automation to be in compliance with the clustering design provided by the ISSO.