STIGQter: STIG Summary: Soaring Software Solutions TCMax 9.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

TCMax must accept personal identity verification (PIV) credentials.

DISA Rule

SV-281377r1186158_rule

Vulnerability Number

V-281377

Group Title

SRG-APP-000391

Rule Version

TCMA-09-000165

Severity

CAT II

CCI(s)

• CCI-001953 - Accepts Personal Identity Verification-compliant credentials.
• CCI-001954 - Electronically verifies Personal Identity Verification-compliant credentials.

Weight

10

Fix Recommendation

1. Using an account of appropriate privileges to access TCMax, go to Settings >> Options.

2. Under "Login and User Options", check the box for "Link Windows IDs to TCMax user accounts".

3. Check the box for "Close TCMax when Windows user account is locked".

4. Click "Save".

Check Contents

Using an account of appropriate privileges to access TCMax, go to Settings >> Options.

Under "Login and User Options", if "Link Windows IDs to TCMax user accounts" is not checked, this is a finding.

If "Close TCMax when Windows user account is locked" is not checked, this is a finding.

Vulnerability Number

V-281377

Documentable

False

Rule Version

TCMA-09-000165

Severity Override Guidance

Using an account of appropriate privileges to access TCMax, go to Settings >> Options.

Under "Login and User Options", if "Link Windows IDs to TCMax user accounts" is not checked, this is a finding.

If "Close TCMax when Windows user account is locked" is not checked, this is a finding.

Check Content Reference

M

Target Key

5734