STIGQter: STIG Summary: Tanium 7.x Operating System on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Tanium Operating System (TanOS) must use multifactor authentication for network access to nonprivileged accounts.

DISA Rule

SV-254848r986547_rule

Vulnerability Number

V-254848

Group Title

SRG-OS-000106

Rule Version

TANS-OS-000330

Severity

CAT II

CCI(s)

CCI-000766 - Implement multifactor authentication for network access to non-privileged accounts.
CCI-004047 - Implement multi-factor authentication for local; network; and/or remote access to privileged accounts; and/or non-privileged accounts such that the device meets organization-defined strength of mechanism requirements.

Weight

Fix Recommendation

1. Sign in to the TanOS console as a user with the tanadmin role.

2. Enter "C" to go to the "User Administration" menu.

3. Enter "M" to go to the "Multi-Factor Global Settings" menu.

4. Enter "M" to "Require Multi-Factor Authentication".

5. Enter "E" to "Enable Require Multi-factor Authentication".

Check Contents

1. Sign in to the TanOS console as a user with the tanadmin role.

2. Enter "C" to go to the "User Administration" menu.

3. Enter "M" to go to the "Multi-Factor Global Settings" menu.

4. If the status shows "Multi-Factor: Optional", this is a finding.

Vulnerability Number

V-254848

Documentable

False

Rule Version

TANS-OS-000330

Severity Override Guidance

1. Sign in to the TanOS console as a user with the tanadmin role.

2. Enter "C" to go to the "User Administration" menu.

3. Enter "M" to go to the "Multi-Factor Global Settings" menu.

4. If the status shows "Multi-Factor: Optional", this is a finding.

Check Content Reference

Target Key

5491