STIGQter: STIG Summary: Tanium 7.x Application on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The SSLHonorCipherOrder must be configured to disable weak encryption algorithms on the Tanium Server.

DISA Rule

SV-254945r962034_rule

Vulnerability Number

V-254945

Group Title

SRG-APP-000416

Rule Version

TANS-AP-001090

Severity

CAT II

CCI(s)

CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

Fix Recommendation

1. Access the Tanium Server interactively.

2. Log on to the server with the tanadmin role.

3. Enter 2: Tanium Operations >> 2: Tanium Configuration Settings >> 1: Edit Tanium Server Settings.

4. Enter number associated with key "SSLHonorCipherOrder" to edit its value.

5. Add or modify the "SSLHonorCipherOrder" key to have a value of "1".

Check Contents

1. Access the Tanium Server interactively.

2. Log on to the server with the tanadmin role.

3. Enter 2: Tanium Operations >> 2: Tanium Configuration Settings >> 1: Edit Tanium Server Settings.

4. Verify the existence of a "SSLHonorCipherOrder" key with a value of "1".

If the "SSLHonorCipherOrder" key does not exist with a value of "1", this is a finding.

Vulnerability Number

V-254945

Documentable

False

Rule Version

TANS-AP-001090

Severity Override Guidance

1. Access the Tanium Server interactively.

2. Log on to the server with the tanadmin role.

3. Enter 2: Tanium Operations >> 2: Tanium Configuration Settings >> 1: Edit Tanium Server Settings.

4. Verify the existence of a "SSLHonorCipherOrder" key with a value of "1".

If the "SSLHonorCipherOrder" key does not exist with a value of "1", this is a finding.

Check Content Reference

Target Key

5492