STIGQter: STIG Summary: HYCU Protege Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The HYCU virtual appliance must generate unique session identifiers using a FIPS 140-2 approved random number generator.

DISA Rule

SV-268302r1043181_rule

Vulnerability Number

V-268302

Group Title

SRG-APP-000224-NDM-000270

Rule Version

HYCU-ND-000960

Severity

CAT II

CCI(s)

• CCI-001188 - Generate a unique session identifier for each session with organization-defined randomness requirements.

Weight

10

Fix Recommendation

Stop the HYCU web server using the following command:
sudo systemctl stop grizzly.service

Enable FIPS-compliant mode using the following command:
sudo /opt/grizzly/bin/enable_fips.sh

Reboot the HYCU virtual machines using the following command:
shutdown -r now

Check Contents

When FIPS mode is enabled, HYCU will use FIPS-compliant behavior. Validation of FIPS status can be done using the following command:
'cat /proc/sys/crypto/fips_enabled'

If command output does not show "1", this is a finding.

'fips-mode-setup --check'

If command output does not show "FIPS mode is enabled", this is a finding.

'update-crypto-policies --show'

If command output does not show "FIPS", this is a finding.

Vulnerability Number

V-268302

Documentable

False

Rule Version

HYCU-ND-000960

Severity Override Guidance

When FIPS mode is enabled, HYCU will use FIPS-compliant behavior. Validation of FIPS status can be done using the following command:
'cat /proc/sys/crypto/fips_enabled'

If command output does not show "1", this is a finding.

'fips-mode-setup --check'

If command output does not show "FIPS mode is enabled", this is a finding.

'update-crypto-policies --show'

If command output does not show "FIPS", this is a finding.

Check Content Reference

M

Target Key

5660