STIGQter: STIG Summary: HYCU Protege Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The HYCU virtual appliance must be configured to implement cryptographic mechanisms using a FIPS 140-2-approved algorithm to protect the confidentiality of remote maintenance sessions.

DISA Rule

SV-268271r1038746_rule

Vulnerability Number

V-268271

Group Title

SRG-APP-000412-NDM-000331

Rule Version

HYCU-ND-000640

Severity

CAT I

CCI(s)

• CCI-003123 - Implement organization-defined cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications.

Weight

10

Fix Recommendation

Stop the HYCU web server:
sudo systemctl stop grizzly.service

Enable FIPS-compliant mode:
sudo /opt/grizzly/bin/enable_fips.sh

Reboot the HYCU virtual appliance:
shutdown -r now

Check Contents

When FIPS mode is enabled, the HYCU application will use FIPS-compliant behavior. Validation of FIPS status can be done using the following commands:
'cat /proc/sys/crypto/fips_enabled'

If command output does not show "1", this is a finding.

'fips-mode-setup --check'

If command output does not show "FIPS mode is enabled", this is a finding.

'update-crypto-policies --show'

If command output does not show "FIPS", this is a finding.

Vulnerability Number

V-268271

Documentable

False

Rule Version

HYCU-ND-000640

Severity Override Guidance

When FIPS mode is enabled, the HYCU application will use FIPS-compliant behavior. Validation of FIPS status can be done using the following commands:
'cat /proc/sys/crypto/fips_enabled'

If command output does not show "1", this is a finding.

'fips-mode-setup --check'

If command output does not show "FIPS mode is enabled", this is a finding.

'update-crypto-policies --show'

If command output does not show "FIPS", this is a finding.

Check Content Reference

M

Target Key

5660