UCF STIG Viewer Logo

vSphere UI must not be configured with the "UserDatabaseRealm" enabled.


Finding ID Version Rule ID IA Controls Severity
V-256787 VCUI-70-000010 SV-256787r889360_rule Medium
The vSphere UI performs user authentication at the application level and not through Tomcat. By default, there is no configuration for the "UserDatabaseRealm" Tomcat authentication mechanism. To eliminate unnecessary features and ensure the vSphere UI remains in its shipping state, the lack of a "UserDatabaseRealm" configuration must be confirmed.
VMware vSphere 7.0 vCenter Appliance UI Security Technical Implementation Guide 2023-06-15


Check Text ( C-60462r889358_chk )
At the command prompt, run the following command:

# grep UserDatabaseRealm /usr/lib/vmware-vsphere-ui/server/conf/server.xml

If the command produces any output, this is a finding.
Fix Text (F-60405r889359_fix)
Navigate to and open:


Remove all nodes.

Restart the service with the following command:

# vmon-cli --restart vsphere-ui