STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

AlmaLinux OS 9 must use the TuxCare ESU repository.

DISA Rule

SV-269125r1107616_rule

Vulnerability Number

V-269125

Group Title

SRG-OS-000033-GPOS-00014

Rule Version

ALMA-09-004310

Severity

CAT I

CCI(s)

CCI-000068 - Implement cryptographic mechanisms to protect the confidentiality of remote access sessions.
CCI-000877 - Employ strong authentication in the establishment of nonlocal maintenance and diagnostic sessions.
CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

Fix Recommendation

FIPS-validated packages are available from TuxCare as part of the Enterprise Support for AlmaLinux product line. Access the packages by purchasing an ESU license key.

Configure the operating system to implement FIPS mode with the following commands (replace 9.2 with 9.6 if using that version of ESU):

$ dnf -y install https://repo.tuxcare.com/tuxcare/tuxcare-release-latest-9.2.noarch.rpm
$ tuxctl --license-key ESU-XXXXXXXXXXXXXXXXXXX
$ dnf -y upgrade
$ fips-mode-setup --enable
$ reboot

Check Contents

Verify that AlmaLinux OS 9 is using the TuxCare ESU repositories with the following command:

$ dnf repolist | grep tuxcare
tuxcare-base TuxCare Enterprise Support for AlmaLinux 9.2 - Base
tuxcare-esu TuxCare Enterprise Support for AlmaLinux 9.2 - ESU
tuxcare-radar TuxCare Radar

If the tuxcare-esu repository is not enabled, this is a finding.

Vulnerability Number

V-269125

Documentable

False

Rule Version

ALMA-09-004310

Severity Override Guidance

Check Content Reference

Target Key

5664