STIGQter: STIG Summary: Nutanix Acropolis Application Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix AOS must have TLS enabled.

DISA Rule

SV-279418r1191040_rule

Vulnerability Number

V-279418

Group Title

SRG-APP-000014-AS-000009

Rule Version

NXAC-AS-000004

Severity

CAT II

CCI(s)

• CCI-000068 - Implement cryptographic mechanisms to protect the confidentiality of remote access sessions.
• CCI-001453 - Implement cryptographic mechanisms to protect the integrity of remote access sessions.

Weight

10

Fix Recommendation

Import a DOD PKI-issued TLS certificate.

1. Click the gear icon in the upper-right corner.
2. Navigate to "SSL Certificate".
3. Select the option to import certificate and follow the prompts.

Check Contents

Verify the Signing Algorithm of the current TLS certificate.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "SSL Certificate".

If there is no DOD TLS certificate loaded, this is a finding.

Vulnerability Number

V-279418

Documentable

False

Rule Version

NXAC-AS-000004

Severity Override Guidance

Verify the Signing Algorithm of the current TLS certificate.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "SSL Certificate".

If there is no DOD TLS certificate loaded, this is a finding.

Check Content Reference

M

Target Key

5729