STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 30 Jan 2025:

The Photon operating system must implement NIST FIPS-validated cryptography for the following: to provision digital signatures, generate cryptographic hashes, and protect unclassified information requiring confidentiality and cryptographic protection in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.

DISA Rule

SV-256589r959006_rule

Vulnerability Number

V-256589

Group Title

SRG-OS-000478-GPOS-00223

Rule Version

PHTN-30-000240

Severity

CAT II

CCI(s)

CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

Fix Recommendation

Navigate to and open:

/boot/grub2/grub.cfg

Locate the kernel command line, which will start with "linux", and add "fips=1" to the end. For example:

linux /$photon_linux audit=1 root=$rootpartition $photon_cmdline coredump_filter=0x37 consoleblank=0 $systemd_cmdline fips=1

Reboot the system for the change to take effect.

Note: The "fipsify" package must be installed for FIPS mode to work properly.

Check Contents

At the command line, run the following command:

# cat /proc/sys/crypto/fips_enabled

If a value of "1" is not returned, this is a finding.

Vulnerability Number

V-256589

Documentable

False

Rule Version

PHTN-30-000240

Severity Override Guidance

At the command line, run the following command:

# cat /proc/sys/crypto/fips_enabled

If a value of "1" is not returned, this is a finding.

Check Content Reference

Target Key

5520