STIGQter: STIG Summary: Tanium 7.x Operating System on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Tanium Operating System (TanOS) must enforce the limit of three consecutive invalid logon attempts by a user during a 15 minute time period.

DISA Rule

SV-254839r1067738_rule

Vulnerability Number

V-254839

Group Title

SRG-OS-000021

Rule Version

TANS-OS-000070

Severity

CAT II

CCI(s)

• CCI-000044 - Enforce the organization-defined limit of consecutive invalid logon attempts by a user during the organization-defined time period.

Weight

10

Fix Recommendation

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "C" for "User Administration Menu," and then press "Enter".

4. Press "L" for "Local Tanium User Management," and then press "Enter".

5. Press "B" for "Security Policy Local Authentication Service," and then press "Enter".

6. Type "yes," and then press "Enter".

7. Input the following settings pressing "Enter" after every value:
a) Minimum Password Lifetime: Configure an appropriate value
b) Maximum Password Lifetime: Configure an appropriate value
c) Minimum Password Length: Configure an appropriate value
d) Minimum Password History: Configure an appropriate value
e) Password Lockout: Configure an appropriate value
f) Password Maximum Failure: 3

8. Type "yes" to accept the new password policy.

Check Contents

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "C" for "User Administration Menu," and then press "Enter".

4. Press "L" for "Local Tanium User Management," and then press "Enter".

5. Press "B" for "Security Policy Local Authentication Service," and then press "Enter".

If the value of "Password Maximum Failure:" is greater than "3", this is a finding.

Vulnerability Number

V-254839

Documentable

False

Rule Version

TANS-OS-000070

Severity Override Guidance

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "C" for "User Administration Menu," and then press "Enter".

4. Press "L" for "Local Tanium User Management," and then press "Enter".

5. Press "B" for "Security Policy Local Authentication Service," and then press "Enter".

If the value of "Password Maximum Failure:" is greater than "3", this is a finding.

Check Content Reference

M

Target Key

5491