UCF STIG Viewer Logo

The vCenter ESX Agent Manager service must be configured to fail to a known safe state if system initialization fails.


Finding ID Version Rule ID IA Controls Severity
V-259012 VCEM-80-000062 SV-259012r934694_rule Medium
Determining a safe state for failure and weighing that against a potential denial of service for users depends on what type of application the web server is hosting. It is preferable that the service abort startup on any initialization failure rather than continuing in a degraded, and potentially insecure, state.
VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide 2023-10-29


Check Text ( C-62752r934692_chk )
At the command line, run the following command:

# grep EXIT_ON_INIT_FAILURE /etc/vmware-eam/catalina.properties

Example result:


If there are no results, or if the "org.apache.catalina.startup.EXIT_ON_INIT_FAILURE" is not set to "true", this is a finding.
Fix Text (F-62661r934693_fix)
Navigate to and open:


Add or change the following line:


Restart the service with the following command:

# vmon-cli --restart eam