Aria Automation Config Compliance policy with Exemptions.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• The intention of the KB is to highlight known issue with Aria Config Sec Ops while running compliance checks. 
• Aria config Sec Ops Compliance policy EXEMPTIONs not listed.
• UI shows "loading ..." without any output.

 

Environment

VMware Aria Automation Config 8.x

Cause

• The issue occurs when the UI tries to decode the "reason" string, and the string contains a character outside of the Latin1 character range.
• This typically happens when a user copies the exemption reason from a spreadsheet into the SSC UI, inadvertently bringing over an unsupported  or "non-standard" character.

Resolution

This issue has been fixed with the release Aria Automation Config 8.16.2.

Workaround:

The quick fix would be to have the user delete the bad exemptions, or all exemptions from the "sec.exemptions" table in postgres, or using the RaaS API client and calling the "sec.delete_exemptions" passing the "policy_uuid" and "exemption_uuid" for each exemption.