Smarts NCM: How to prevent Axis happiness page from showing various system usernames and passwords

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:




In NCM the Axis happiness page (https://<ncm AS server>:8880/Api/happyaxis.jsp) shows a lot of confidential system information. 

The information includes:

com.powerup.configmgr.server.services.background.queue_user_name=ionixncmuser
com.powerup.configmgr.server.services.background.queue_password=ionixncmpwd
com.powerup.configmgr.server.services.revision.queue_user_name=ionixncmuser
com.powerup.configmgr.server.services.revision.queue_password=ionixncmpwd
com.powerup.configmgr.server.services.scheduler.queue_user_name=ionixncmuser
com.powerup.configmgr.server.services.scheduler.queue_password=ionixncmpwd
com.powerup.configmgr.server.services.bac.ejb.topic_user_name=ionixncmuser
com.powerup.configmgr.server.services.repository.ejb.topic_password=ionixncmpwd
com.powerup.configmgr.server.default.jms.user.name=system
com.powerup.configmgr.server.default.jms.user.password=system-pw
com.powerup.configmgr.server.services.credentials.mode=Normal
com.powerup.configmgr.server.security.log_authorization_success=false
com.powerup.configmgr.server.services.reporting.queue_password=report
security.rsa.fips.enabled=false

Environment

VMware Smart Assurance - NCM

Resolution

A fix is now available for this issue.  Please download and install Smarts NCM 9.4 Patch 1