STIGQter: STIG Summary: ISEC7 Sphere Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

When using PKI-based authentication for user access, the ISEC7 SPHERE must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.

DISA Rule

SV-224768r1013818_rule

Vulnerability Number

V-224768

Group Title

SRG-APP-000175

Rule Version

ISEC-06-000780

Severity

CAT II

CCI(s)

CCI-000185 - For public key-based authentication, validate certificates by constructing and verifying a certification path to an accepted trust anchor including checking certificate status information.

Weight

Fix Recommendation

Log in to the server(s) hosting the ISEC7 SPHERE application.
Open the Microsoft Management Console and add the Local Computer Certificates snap-in.
Open the Trusted Root Certification Authorities >> Certificates.
Install the DOD Root PKI Certificates Authorities to the server.

Check Contents

Log in to the server(s) hosting the ISEC7 SPHERE application.
Open the Microsoft Management Console and add the Local Computer Certificates snap-in.
Open the Trusted Root Certification Authorities >> Certificates.
Verify the DOD Root PKI Certificates Authorities have been added to the server.

If the DOD Root PKI Certificates Authorities have not been added to the server, this is a finding.

Vulnerability Number

V-224768

Documentable

False

Rule Version

ISEC-06-000780

Severity Override Guidance

Log in to the server(s) hosting the ISEC7 SPHERE application.
Open the Microsoft Management Console and add the Local Computer Certificates snap-in.
Open the Trusted Root Certification Authorities >> Certificates.
Verify the DOD Root PKI Certificates Authorities have been added to the server.

If the DOD Root PKI Certificates Authorities have not been added to the server, this is a finding.

Check Content Reference

Target Key

4200