STIGQter: STIG Summary: Tanium 7.x Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

The Tanium Server certificate must be signed by a DoD certificate authority (CA).

DISA Rule

SV-253860r997282_rule

Vulnerability Number

V-253860

Group Title

SRG-APP-000427

Rule Version

TANS-SV-000036

Severity

CAT II

CCI(s)

• CCI-002470 - Only allow the use of organization-defined certificate authorities for verification of the establishment of protected sessions.

Weight

10

Fix Recommendation

Request or regenerate the certificate from a DoD root CA.

Check Contents

1. Using a web browser on a system that has connectivity to the Tanium application, access the Tanium application web user interface (UI) and log on with multifactor authentication.

2. When connected, review the certificate for the Tanium Server as noted below.

3. In the web browser, view the certificate and verify it was issued by a DoD root CA. Also verify the certification path's top level is a DoD root CA.

If the certificate authority is not DoD Root CA, this is a finding.

Vulnerability Number

V-253860

Documentable

False

Rule Version

TANS-SV-000036

Severity Override Guidance

1. Using a web browser on a system that has connectivity to the Tanium application, access the Tanium application web user interface (UI) and log on with multifactor authentication.

2. When connected, review the certificate for the Tanium Server as noted below.

3. In the web browser, view the certificate and verify it was issued by a DoD root CA. Also verify the certification path's top level is a DoD root CA.

If the certificate authority is not DoD Root CA, this is a finding.

Check Content Reference

M

Target Key

5476