STIGQter STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

DISA Rule

SV-279581r1192447_rule

Vulnerability Number

V-279581

Group Title

SRG-OS-000021-GPOS-00005

Rule Version

NXAC-OS-000128

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the use of complex passwords for Nutanix OS VMs.

1. For AOS, configure the use of complex passwords using the following command.

$ sudo salt-call state.sls security/CVM/pamCVM.sls

2. For Prism Central, configure the use of complex passwords using the following command.

$ sudo salt-call state.sls security/PCVM/pamPCVM.sls

3. For Files, configure the use of complex passwords using the following command.

$ sudo salt-call state.sls security/AFS/pamAFS.sls

4. For Prism Central, configure the use of complex passwords using the following command.

$ ncli cluster edit-hypervisor-security-params enable-high-strength-password=true

Check Contents

Verify Nutanix OS enforces a delay of at least four seconds between console logon prompts following a failed logon attempt using the following command.

$ sudo grep -i fail_delay /etc/login.defs
FAIL_DELAY 4

If the value of "FAIL_DELAY" is not set to "4" or greater, or the line is commented out, this is a finding.

Vulnerability Number

V-279581

Documentable

False

Rule Version

NXAC-OS-000128

Severity Override Guidance

Verify Nutanix OS enforces a delay of at least four seconds between console logon prompts following a failed logon attempt using the following command.

$ sudo grep -i fail_delay /etc/login.defs
FAIL_DELAY 4

If the value of "FAIL_DELAY" is not set to "4" or greater, or the line is commented out, this is a finding.

Check Content Reference

M

Target Key

5730