STIGQter: STIG Summary: Riverbed NetIM OS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

Ubuntu OS must implement NIST FIPS-validated cryptography.

DISA Rule

SV-275735r1148255_rule

Vulnerability Number

V-275735

Group Title

SRG-OS-000396-GPOS-00176

Rule Version

RIIM-OS-671010

Severity

CAT I

CCI(s)

CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.
CCI-001941 - Implement replay-resistant authentication mechanisms for access to privileged accounts and/or non-privileged accounts.

Weight

Fix Recommendation

Configure Ubuntu OS to run in FIPS mode. Add "fips=1" to the kernel parameter during Ubuntu OS install.

Enabling a FIPS mode on a pre-existing system involves a number of modifications to Ubuntu OS. Refer to the Ubuntu Pro security certification documentation for instructions.

A subscription to the Ubuntu Pro plan is required to obtain the FIPS Kernel cryptographic modules and enable FIPS.

Note: Ubuntu Pro security certification instructions can be found at: https://ubuntu.com/security/certifications/docs/fips-enablement.

Check Contents

Verify the system is configured to run in FIPS mode by using the following command:

$ grep -i 1 /proc/sys/crypto/fips_enabled
1

If a value of "1" is not returned, this is a finding.

Vulnerability Number

V-275735

Documentable

False

Rule Version

RIIM-OS-671010

Severity Override Guidance

Verify the system is configured to run in FIPS mode by using the following command:

$ grep -i 1 /proc/sys/crypto/fips_enabled
1

If a value of "1" is not returned, this is a finding.

Check Content Reference

Target Key

5706