STIGQter: STIG Summary: SPEC Innovations Innoslate 4.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 08 Sep 2022:

Innoslate must map the authenticated identity to the individual user or group account for PKI-based authentication.

DISA Rule

SV-254094r845258_rule

Vulnerability Number

V-254094

Group Title

SRG-APP-000177

Rule Version

SPEC-IN-000390

Severity

CAT I

CCI(s)

CCI-000187 - For public key-based authentication, map the authenticated identity to the account of the individual or group.

Weight

Fix Recommendation

1. Open the settings.properties file [Path].
2. Change the AUTHENTICATION_TYPE to "CAC".
3. Save.
4. Restart the Innoslate service.

Check Contents

Open the settings.properties file [Path] and verify the AUTHENTICATION_TYPE is set to "CAC".

If AUTHENTICATION_TYPE is not set to "CAC", this is a finding.

Vulnerability Number

V-254094

Documentable

False

Rule Version

SPEC-IN-000390

Severity Override Guidance

Open the settings.properties file [Path] and verify the AUTHENTICATION_TYPE is set to "CAC".

If AUTHENTICATION_TYPE is not set to "CAC", this is a finding.

Check Content Reference

Target Key

5481