STIGQter STIGQter: STIG Summary: Application Programming Interface (API) Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

The API must use TLS version 1.2 at a minimum.

DISA Rule

SV-274710r1143745_rule

Vulnerability Number

V-274710

Group Title

SRG-APP-000439

Rule Version

SRG-APP-000439-API-001010

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Build or configure all of the API systems to require TLS (version 1.2 or higher) for all communication encryption in accordance with data protection requirements.

Check Contents

Verify the API uses TLS version 1.2 at a minimum.

Review the API documentation and interview the API administrator.

Identify API clients, servers and associated network connections including API networking ports.

Review API documents for instructions or guidance on configuring API encryption settings.

Verify the API is configured to enable encryption protections for data in accordance with the data protection requirements. If no data protection requirements exist, ensure all API data is encrypted.

If the API does not utilize TLS or another approved encryption mechanism to protect the confidentiality and integrity of transmitted information, this is a finding.

Vulnerability Number

V-274710

Documentable

False

Rule Version

SRG-APP-000439-API-001010

Severity Override Guidance

Verify the API uses TLS version 1.2 at a minimum.

Review the API documentation and interview the API administrator.

Identify API clients, servers and associated network connections including API networking ports.

Review API documents for instructions or guidance on configuring API encryption settings.

Verify the API is configured to enable encryption protections for data in accordance with the data protection requirements. If no data protection requirements exist, ensure all API data is encrypted.

If the API does not utilize TLS or another approved encryption mechanism to protect the confidentiality and integrity of transmitted information, this is a finding.

Check Content Reference

M

Target Key

5703