STIGQter: STIG Summary: Central Log Server Security Requirements Guide Version: 3 Release: 4 Benchmark Date: 01 Apr 2026:

The Central Log Server, when using PKI-based authentication, must enforce authorized access to the corresponding private key.

DISA Rule

SV-206479r961041_rule

Vulnerability Number

V-206479

Group Title

SRG-APP-000176

Rule Version

SRG-APP-000176-AU-002640

Severity

CAT I

CCI(s)

• CCI-000186 - For public key-based authentication, enforce authorized access to the corresponding private key.

Weight

10

Fix Recommendation

If using PKI-based authentication, configure the Central Log Server to enforce authorized access to the corresponding private key.

Check Contents

If not using PKI-based authentication this is NA.

Examine the configuration.

Verify the Central Log Server is configured to enforce authorized access to the corresponding private key when using PKI-based authentication.

If the Central Log Server is not configured to enforce authorized access to the corresponding private key when using PKI-based authentication, this is a finding.

Vulnerability Number

V-206479

Documentable

False

Rule Version

SRG-APP-000176-AU-002640

Severity Override Guidance

If not using PKI-based authentication this is NA.

Examine the configuration.

Verify the Central Log Server is configured to enforce authorized access to the corresponding private key when using PKI-based authentication.

If the Central Log Server is not configured to enforce authorized access to the corresponding private key when using PKI-based authentication, this is a finding.

Check Content Reference

M

Target Key

2901