STIGQter: STIG Summary: Red Hat Ansible Automation Controller Web Server Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 05 Jan 2026:

The Automation Controller NGINX web server must use cryptography on all remote connections.

DISA Rule

SV-256942r960762_rule

Vulnerability Number

V-256942

Group Title

SRG-APP-000015-WSR-000014

Rule Version

APWS-AT-000040

Severity

CAT II

CCI(s)

• CCI-001453 - Implement cryptographic mechanisms to protect the integrity of remote access sessions.

Weight

10

Fix Recommendation

As a System Administrator, locate the inventory file used to install Ansible Automation Platform (usually in the installer directory). Edit this file and ensure the "nginx_disable_https" variable is absent or is set to "false".

Run the setup.sh command in the installer directory to reconfigure the controller to use the new setting:

sudo ./setup.sh

Check Contents

As any user, execute the following command, substituting "<controller_fqdn>" for the hostname of the Automation Controller:

curl -s -w '%{redirect_url}\n' -o /dev/null http://<controller_fqdn>/api/v2/ping/ | grep '^https' >/dev/null || echo FAILED

If "FAILED" is displayed, this is a finding.

Vulnerability Number

V-256942

Documentable

False

Rule Version

APWS-AT-000040

Severity Override Guidance

As any user, execute the following command, substituting "<controller_fqdn>" for the hostname of the Automation Controller:

curl -s -w '%{redirect_url}\n' -o /dev/null http://<controller_fqdn>/api/v2/ping/ | grep '^https' >/dev/null || echo FAILED

If "FAILED" is displayed, this is a finding.

Check Content Reference

M

Target Key

5535