STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must use cryptographic mechanisms to protect the integrity of audit tools.

DISA Rule

SV-279574r1192094_rule

Vulnerability Number

V-279574

Group Title

SRG-OS-000278-GPOS-00108

Rule Version

NXAC-OS-000116

Severity

CAT I

CCI(s)

• CCI-001496 - Implement cryptographic mechanisms to protect the integrity of audit tools.

Weight

10

Fix Recommendation

Enable AIDE for each OS VM.

1. For AOS, configure Aide using the following command.

$ ncli cluster edit-CVM-security-params enable-aide=true

2. For Prism Central, configure AIDE using the following command.

$ ncli cluster edit-PCVM-security-params enable-aide=true

3. For Files, configure AIDE using the following command.

$ ncli cluster edit-AFS-security-params enable-aide=true

4. For AHV, configure AIDE using the following command.

$ ncli cluster edit-hypervisor-security-params enable-aide=true

Check Contents

Verify AIDE is enabled and configured.

1. For AOS, verify AIDE is enabled and configured using the following command.

$ ncli cluster get-cvm-security-config
Enable Aide : true

2. For Prism Central, verify AIDE is enabled and configured using the following command.

$ ncli cluster get-pvcm-security-config
Enable Aide : true

3. For Files, verify AIDE is enabled and configured using the following command.

$ ncli cluster get-afs-security-config
Enable Aide : true

4. For AHV, verify AIDE is enabled and configured using the following command.

$ ncli cluster get-hypervisor-security-config | egrep "Aide"
Enable Aide : true

If value for "Enable AIDE" is not "true", this is a finding.

Vulnerability Number

V-279574

Documentable

False

Rule Version

NXAC-OS-000116

Severity Override Guidance

Verify AIDE is enabled and configured.

1. For AOS, verify AIDE is enabled and configured using the following command.

$ ncli cluster get-cvm-security-config
Enable Aide : true

2. For Prism Central, verify AIDE is enabled and configured using the following command.

$ ncli cluster get-pvcm-security-config
Enable Aide : true

3. For Files, verify AIDE is enabled and configured using the following command.

$ ncli cluster get-afs-security-config
Enable Aide : true

4. For AHV, verify AIDE is enabled and configured using the following command.

$ ncli cluster get-hypervisor-security-config | egrep "Aide"
Enable Aide : true

If value for "Enable AIDE" is not "true", this is a finding.

Check Content Reference

M

Target Key

5730