STIGQter: STIG Summary: Nutanix Acropolis Application Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix AOS must protect the confidentiality and integrity of all information at rest.

DISA Rule

SV-279446r1192360_rule

Vulnerability Number

V-279446

Group Title

SRG-APP-000231-AS-000133

Rule Version

NXAC-AS-000046

Severity

CAT II

CCI(s)

CCI-001199 - Protects the confidentiality and/or integrity of organization-defined information at rest.

Weight

Fix Recommendation

Configure the Nutanix VM application server to use data-at-rest encryption.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "Data-at-Rest Encryption".
4. Select "Edit configuration".
5. Select either the cluster local KMS or an external KMS.
6. Click "Protect" and confirm by typing "ENCRYPT".

Check Contents

Confirm the Nutanix VM application server is set to use data-at-rest encryption.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "Data-at-Rest Encryption".
4. Verify software encryption is enabled.

If software encryption is not enabled, this is a finding.

Nutanix AOS must protect the confidentiality and integrity of all information at rest.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key