STIGQter: STIG Summary: Microsoft Azure SQL Managed Instance Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 23 Sep 2025:

Azure SQL Managed Instance must maintain a separate execution domain for each executing process.

DISA Rule

SV-276311r1149842_rule

Vulnerability Number

V-276311

Group Title

SRG-APP-000431-DB-000388

Rule Version

MSQL-D0-012300

Severity

CAT II

CCI(s)

• CCI-002530 - Maintain a separate execution domain for each executing system process.

Weight

10

Fix Recommendation

Disable use of or remove any CLR code that is not authorized.

To disable the use of CLR, from the query prompt:

EXEC SP_CONFIGURE 'clr enabled', 0;
RECONFIGURE WITH OVERRIDE;

Check Contents

Review the server documentation to determine whether use of CLR assemblies is required.

To determine if CLR is enabled, execute the following command:

SELECT name, value, value_in_use
FROM sys.configurations
WHERE name = 'clr enabled'

If "value_in_use" is a "1", review the system documentation to determine whether the use of CLR code is approved. If it is not approved, this is a finding.

Vulnerability Number

V-276311

Documentable

False

Rule Version

MSQL-D0-012300

Severity Override Guidance

Review the server documentation to determine whether use of CLR assemblies is required.

To determine if CLR is enabled, execute the following command:

SELECT name, value, value_in_use
FROM sys.configurations
WHERE name = 'clr enabled'

If "value_in_use" is a "1", review the system documentation to determine whether the use of CLR code is approved. If it is not approved, this is a finding.

Check Content Reference

M

Target Key

5711