SV-279581r1192447_rule
V-279581
SRG-OS-000021-GPOS-00005
NXAC-OS-000128
CAT II
10
Configure the use of complex passwords for Nutanix OS VMs.
1. For AOS, configure the use of complex passwords using the following command.
$ sudo salt-call state.sls security/CVM/pamCVM.sls
2. For Prism Central, configure the use of complex passwords using the following command.
$ sudo salt-call state.sls security/PCVM/pamPCVM.sls
3. For Files, configure the use of complex passwords using the following command.
$ sudo salt-call state.sls security/AFS/pamAFS.sls
4. For Prism Central, configure the use of complex passwords using the following command.
$ ncli cluster edit-hypervisor-security-params enable-high-strength-password=true
Verify Nutanix OS enforces a delay of at least four seconds between console logon prompts following a failed logon attempt using the following command.
$ sudo grep -i fail_delay /etc/login.defs
FAIL_DELAY 4
If the value of "FAIL_DELAY" is not set to "4" or greater, or the line is commented out, this is a finding.
V-279581
False
NXAC-OS-000128
Verify Nutanix OS enforces a delay of at least four seconds between console logon prompts following a failed logon attempt using the following command.
$ sudo grep -i fail_delay /etc/login.defs
FAIL_DELAY 4
If the value of "FAIL_DELAY" is not set to "4" or greater, or the line is commented out, this is a finding.
M
5730