STIGQter: STIG Summary: HPE Nimble Storage Array NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The HPE Nimble must obtain its public key certificates from an appropriate certificate policy through an approved service provider.

DISA Rule

SV-252198r1001013_rule

Vulnerability Number

V-252198

Group Title

SRG-APP-000516-NDM-000344

Rule Version

HPEN-NM-000130

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.
CCI-001159 - Issue public key certificates under an organization-defined certificate policy or obtain public key certificates from an approved service provider.
CCI-004068 - For public key-based authentication, implement a local cache of revocation data to support path discovery and validation.

Weight

Fix Recommendation

To create and import a custom, CA-signed certificate, follow these steps:

1. Type "cert --gen custom-csr". Copy the displayed CSR and submit it to an appropriate signing authority.
2. Type "cert --import custom-ca" and paste the PEM-encoded CA certificate chain as input to the command.
3. Type "cert --import custom" and paste the signed certificate obtained from the CA.

Check Contents

Type "cert --list". Review the output to confirm that the custom-ca and custom certificates exist, and the "Use" values specified for HTTPS and APIS are both "custom". If not, this is a finding.

Vulnerability Number

V-252198

Documentable

False

Rule Version

HPEN-NM-000130

Severity Override Guidance

Type "cert --list". Review the output to confirm that the custom-ca and custom certificates exist, and the "Use" values specified for HTTPS and APIS are both "custom". If not, this is a finding.

Check Content Reference

Target Key

5460