STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

AlmaLinux OS 9 must enable FIPS mode.

DISA Rule

SV-269127r1155256_rule

Vulnerability Number

V-269127

Group Title

SRG-OS-000033-GPOS-00014

Rule Version

ALMA-09-004420

Severity

CAT I

CCI(s)

CCI-000068 - Implement cryptographic mechanisms to protect the confidentiality of remote access sessions.
CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.
CCI-000877 - Employ strong authentication in the establishment of nonlocal maintenance and diagnostic sessions.

Weight

Fix Recommendation

FIPS-validated packages are available from TuxCare as part of the Enterprise Support for AlmaLinux product line. An ESU license key must be purchased.

Configure the operating system to implement FIPS mode with the following commands (replace 9.2 with 9.6 if using that version of ESU):

$ dnf install -y https://repo.tuxcare.com/tuxcare/tuxcare-release-latest-9.2.noarch.rpm
$ tuxctl --license-key ESU-XXXXXXXXXXXXXXXXXXX
$ dnf -y upgrade
$ fips-mode-setup --enable
$ reboot

Check Contents

Verify that AlmaLinux OS 9 is in FIPS mode with the following command:

$ fips-mode-setup --check

FIPS mode is enabled.

If FIPS mode is not enabled, this is a finding.

Vulnerability Number

V-269127

Documentable

False

Rule Version

ALMA-09-004420

Severity Override Guidance

Verify that AlmaLinux OS 9 is in FIPS mode with the following command:

$ fips-mode-setup --check

FIPS mode is enabled.

If FIPS mode is not enabled, this is a finding.

Check Content Reference

Target Key

5664