STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

DISA Rule

SV-246926r1051115_rule

Vulnerability Number

V-246926

Group Title

SRG-APP-000148-NDM-000346

Rule Version

NAOT-AC-000005

Severity

CAT II

CCI(s)

• CCI-001358 - Establish privileged user accounts in accordance with a role-based access scheme; or an attribute-based access scheme.

Weight

10

Fix Recommendation

Configure a secure password for the local administrative account with "security login password -username <user_name>".

Check Contents

Use "security login show -role admin -authentication-method password" to see the local administrative account.

If ONTAP is not configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable, this is a finding.

Vulnerability Number

V-246926

Documentable

False

Rule Version

NAOT-AC-000005

Severity Override Guidance

Use "security login show -role admin -authentication-method password" to see the local administrative account.

If ONTAP is not configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable, this is a finding.

Check Content Reference

M

Target Key

5415