VCST-67-000006 - The Security Token Service must generate log records during Java startup and shutdown - level


Logging must be started as soon as possible when a service starts and as late as possible when a service is stopped. Many forms of suspicious actions can be detected by analyzing logs for unexpected service starts and stops. Also, by starting to log immediately after a service starts, it becomes more difficult for suspicious activity to go unlogged.


Connect to the PSC, whether external or embedded.

Navigate to and open /usr/lib/vmware-sso/vmware-sts/conf/

Ensure that the 'handlers' and '.handlers' lines are configured as follows:

handlers =,,,, java.util.logging.ConsoleHandler

.handlers =

Ensure that the following lines are present: = FINE = ${catalina.base}/logs = catalina. = -1

See Also

Item Details


References: 800-53|AU-12a., CAT|II, CCI|CCI-000169, Rule-ID|SV-239657r816696_rule, STIG-ID|VCST-67-000006, Vuln-ID|V-239657

Plugin: Unix

Control ID: 31cfbbbc7c3a50df6e0273ba8cc0ee9ff813e9a4d9c046175f1f56ce3fdb2008