STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must set the SCMA framework to check the baseline daily.

DISA Rule

SV-279582r1192311_rule

Vulnerability Number

V-279582

Group Title

SRG-OS-000368-GPOS-00154

Rule Version

NXAC-OS-000129

Severity

CAT II

CCI(s)

• CCI-001764 - Prevent program execution in accordance with organization-defined policies, rules of behavior, and/or access agreements regarding software program usage and restrictions; rules authorizing the terms and conditions of software program usage.

Weight

10

Fix Recommendation

1. For AOS, Prism Central, and Files, set the SCMA framework to check the baseline daily using the following command.

$ sudo ncli cluster edit-cvm-security-params schedule=daily

2. For AHV, set the SCMA framework to check the baseline daily using the following command.

$ sudo ncli cluster edit-hypervisor-security-params schedule=hourly

Check Contents

1. For AOS, Prism Central, and Files, verify the SCMA framework is set to check the baseline daily using the following command.

$ ncli cluster get-cvm-security-config | egrep 'Schedule'
Schedule : DAILY

2. For AHV, verify the SCMA framework is set to check the baseline daily using the following command.

$ ncli cluster get-hypervisor-security-config | egrep 'Schedule'
Schedule : DAILY

If the SCMA framework "Schedule" is not set to "DAILY", this is a finding.

Vulnerability Number

V-279582

Documentable

False

Rule Version

NXAC-OS-000129

Severity Override Guidance

1. For AOS, Prism Central, and Files, verify the SCMA framework is set to check the baseline daily using the following command.

$ ncli cluster get-cvm-security-config | egrep 'Schedule'
Schedule : DAILY

2. For AHV, verify the SCMA framework is set to check the baseline daily using the following command.

$ ncli cluster get-hypervisor-security-config | egrep 'Schedule'
Schedule : DAILY

If the SCMA framework "Schedule" is not set to "DAILY", this is a finding.

Check Content Reference

M

Target Key

5730