STIGQter: STIG Summary: VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 31 Oct 2023:

The Photon operating system must use mechanisms meeting the requirements of applicable federal laws, Executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.

DISA Rule

SV-258827r933542_rule

Vulnerability Number

V-258827

Group Title

SRG-OS-000120-GPOS-00061

Rule Version

PHTN-40-000059

Severity

CAT II

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

Navigate to and open:

/etc/pam.d/system-password

Add or update the following line:

password required pam_unix.so sha512 shadow use_authtok

Check Contents

At the command line, run the following command to verify system-password is configured to encrypt representations of passwords:

# grep sha512 /etc/pam.d/system-password

Example result:

password required pam_unix.so sha512 shadow use_authtok

If the "pam_unix.so" module is not configured with the "sha512" parameter, this is a finding.

Vulnerability Number

V-258827

Documentable

False

Rule Version

PHTN-40-000059

Severity Override Guidance

At the command line, run the following command to verify system-password is configured to encrypt representations of passwords:

# grep sha512 /etc/pam.d/system-password

Example result:

password required pam_unix.so sha512 shadow use_authtok

If the "pam_unix.so" module is not configured with the "sha512" parameter, this is a finding.

Check Content Reference

M

Target Key

5569