Detections
Analytics
WBSP-AS-001520 - The WebSphere Application Server must not generate LTPA keys automatically.
Information
Automated LTPA key generation can create unplanned outages. Plan to change your LTPA keys during a scheduled outage. Distribute the new keys to all nodes in the cell and to all external systems/cells during this outage window.Solution
Navigate to Security >> SSL Certificate and Key Management >> Key set groups >> Cell LTPAKeySetGroup.Uncheck automatically generate keys.
Click 'OK'.
Click 'Save'.
Restart the 'Deployment Manager'.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_WebSphere_Traditional_V9-x_V2R1_STIG.zip
Item Details
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-28(1), CAT|III, CCI|CCI-002475, Rule-ID|SV-255883r1067567_rule, STIG-ID|WBSP-AS-001520, STIG-Legacy|SV-96095, STIG-Legacy|V-81381, Vuln-ID|V-255883
Plugin: Unix
Control ID: ec0bc94ebf4a1e3e90b4726c07ae24122f6eea3595c9f5c432fcc00261a01233