STIGQter: STIG Summary: Tanium 7.x Operating System on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Tanium Operating System (TanOS) must enforce 24 hours/one day as the maximum password lifetime.

DISA Rule

SV-254843r1015851_rule

Vulnerability Number

V-254843

Group Title

SRG-OS-000075

Rule Version

TANS-OS-000270

Severity

CAT II

CCI(s)

CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

Fix Recommendation

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "C" for "User Administration Menu".

4. Press "L" for "Local Tanium User Management".

5. Press "B" for "Security Policy Local Authentication Service".

6. Type "Yes".

7. Set the value for "Define the minimum password in days [0 - 20]" to "1".

8. Press "Enter" to accept the current values for the rest of the options.

9. Type "Yes" to apply the new security policy.

Check Contents

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "C" for "User Administration Menu".

4. Press "L" for "Local Tanium User Management".

5. Press "B" for "Security Policy Local Authentication Service".

If the "Password Minimum Age (days)" is not set to "1", this is a finding.

Vulnerability Number

V-254843

Documentable

False

Rule Version

TANS-OS-000270

Severity Override Guidance

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "C" for "User Administration Menu".

4. Press "L" for "Local Tanium User Management".

5. Press "B" for "Security Policy Local Authentication Service".

If the "Password Minimum Age (days)" is not set to "1", this is a finding.

Check Content Reference

Target Key

5491