STIGQter: STIG Summary: Cisco ACI NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

The Cisco ACI must use FIPS 140-2/140-3 approved algorithms for authentication to a cryptographic module.

DISA Rule

SV-271966r1114341_rule

Vulnerability Number

V-271966

Group Title

SRG-APP-000179-NDM-000265

Rule Version

CACI-ND-000051

Severity

CAT I

CCI(s)

CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.
CCI-002890 - Implement organization-defined cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications.
CCI-003123 - Implement organization-defined cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications.

Weight

Fix Recommendation

When FIPS is enabled, it is applied across the Cisco Application Policy Infrastructure Controller (APIC).

1. On the menu bar, select System >> System Settings.
2. In the Navigation pane, select "Fabric Security".
3. In the Work pane, in the Properties area, select the desired FIPS mode.
4. Reboot to complete the configuration.

Check Contents

1. Navigate to System >> System Settings.
2. Click "Fabric Security".
3. Click the "Policy" tab.
4. Verify FIPS Mode is set to "Enable".

If FIPS mode is not set to "Enable", this is a finding.

Vulnerability Number

V-271966

Documentable

False

Rule Version

CACI-ND-000051

Severity Override Guidance

1. Navigate to System >> System Settings.
2. Click "Fabric Security".
3. Click the "Policy" tab.
4. Verify FIPS Mode is set to "Enable".

If FIPS mode is not set to "Enable", this is a finding.

Check Content Reference

Target Key

5682