STIGQter: STIG Summary: Container Platform Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 28 Oct 2025:

The container platform must use a valid FIPS 140-2 or FIPS 140-3 approved cryptographic module to generate hashes.

DISA Rule

SV-233271r1137647_rule

Vulnerability Number

V-233271

Group Title

SRG-APP-000514

Rule Version

SRG-APP-000514-CTR-001315

Severity

CAT II

CCI(s)

• CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

10

Fix Recommendation

Configure the container platform to use valid FIPS 140-2/140-3 approved cryptographic modules to generate hashes.

Check Contents

Review the container platform configuration to validate that valid FIPS 140-2/140-3 approved cryptographic modules are being used to generate hashes.

If non-valid or unapproved FIPS 140-2/140-3 cryptographic modules are being used to generate hashes, this is a finding.

Vulnerability Number

V-233271

Documentable

False

Rule Version

SRG-APP-000514-CTR-001315

Severity Override Guidance

Review the container platform configuration to validate that valid FIPS 140-2/140-3 approved cryptographic modules are being used to generate hashes.

If non-valid or unapproved FIPS 140-2/140-3 cryptographic modules are being used to generate hashes, this is a finding.

Check Content Reference

M

Target Key

5239