STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix VMM must, for password-based authentication, verify that when users create or update passwords, the passwords are not found on the list of commonly used, expected, or compromised passwords.

DISA Rule

SV-279603r1192618_rule

Vulnerability Number

V-279603

Group Title

SRG-OS-000710-GPOS-00160

Rule Version

NXAC-OS-000159

Severity

CAT II

CCI(s)

• CCI-004061 - For password-based authentication, verify when users create or update passwords, that the passwords are not found on the list of commonly-used, expected, or compromised passwords in IA-5 (1) (a).

Weight

10

Fix Recommendation

Configure the operating system to enforce password complexity by requiring that at least one special character be used by setting the "ocredit" option using the following command.

$ ncli cluster edit-cvm-security-params enable-high-strength-password=true

Check Contents

Verify Nutanix OS prevents using dictionary words for passwords.

Determine if the field "dictcheck" is set using the following command.

$ sudo grep -r dictcheck /etc/security/pwquality.conf*

/etc/security/pwquality.conf:dictcheck=1

If the "dictcheck" parameter is not set to "1", is commented out, or if conflicting results are returned, this is a finding.

Vulnerability Number

V-279603

Documentable

False

Rule Version

NXAC-OS-000159

Severity Override Guidance

Verify Nutanix OS prevents using dictionary words for passwords.

Determine if the field "dictcheck" is set using the following command.

$ sudo grep -r dictcheck /etc/security/pwquality.conf*

/etc/security/pwquality.conf:dictcheck=1

If the "dictcheck" parameter is not set to "1", is commented out, or if conflicting results are returned, this is a finding.

Check Content Reference

M

Target Key

5730