STIGQter: STIG Summary: HPE Alletra Storage ArcusOS Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

The HPE Alletra Storage ArcusOS device must use FIPS 140-approved algorithms for authentication to a cryptographic module.

DISA Rule

SV-283387r1194855_rule

Vulnerability Number

V-283387

Group Title

SRG-APP-000179-NDM-000265

Rule Version

ASMP-ND-000600

Severity

CAT I

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.
• CCI-000197 - For password-based authentication, transmit passwords only cryptographically-protected channels.
• CCI-001188 - Generate a unique session identifier for each session with organization-defined randomness requirements.
• CCI-002890 - Implement organization-defined cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications.
• CCI-003123 - Implement organization-defined cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications.

Weight

10

Fix Recommendation

Warning: Enabling FIPS mode requires restarting all system management interfaces, which will terminate all existing connections including this one.

Set the communications encryption module into FIPS mode:

cli% controlsecurity fips enable

Check Contents

Verify the status of the FIPS communication library with the following command:

cli% controlsecurity fips status

FIPS mode: Enabled
Service Status
AUTHN Enabled
CIM Disabled
CLI Enabled
EKM Enabled
LDAP Enabled
QW Enabled
RDA Enabled
SC CONNECTOR Disabled
SNMP Enabled
SSH Enabled
SYSLOG Enabled
VASA Enabled
WSAPI Enabled

If the line "FIPS Mode:" is not "Enabled", this is a finding.

If any of the service lines for "CLI", "EKM", "LDAP", "SNMP", "SSH", or "SYSLOG" are "Disabled", this is a finding.

If CIM, VASA, or WSAPI are "Disabled", and the services are enabled, this is a finding.

Vulnerability Number

V-283387

Documentable

False

Rule Version

ASMP-ND-000600

Severity Override Guidance

Verify the status of the FIPS communication library with the following command:

cli% controlsecurity fips status

FIPS mode: Enabled
Service Status
AUTHN Enabled
CIM Disabled
CLI Enabled
EKM Enabled
LDAP Enabled
QW Enabled
RDA Enabled
SC CONNECTOR Disabled
SNMP Enabled
SSH Enabled
SYSLOG Enabled
VASA Enabled
WSAPI Enabled

If the line "FIPS Mode:" is not "Enabled", this is a finding.

If any of the service lines for "CLI", "EKM", "LDAP", "SNMP", "SSH", or "SYSLOG" are "Disabled", this is a finding.

If CIM, VASA, or WSAPI are "Disabled", and the services are enabled, this is a finding.

Check Content Reference

M

Target Key

5742