STIGQter: STIG Summary: HPE Alletra Storage ArcusOS Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

The HPE Alletra Storage ArcusOS device must authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based.

DISA Rule

SV-283410r1194924_rule

Vulnerability Number

V-283410

Group Title

SRG-APP-000395-NDM-000347

Rule Version

ASMP-ND-000840

Severity

CAT II

CCI(s)

CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.
CCI-004922 - Synchronize system clocks within and between systems or system components.
CCI-004923 - Compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

Weight

Fix Recommendation

Import the NTP key and add it to the NTP server with the following commands:

cli% setnet ntp -add <server ip address>

cli% importkeys ntp stdin
Please paste the keys for ntp. Once finished, please press Enter twice.
1 SHA256 myfirstsecretkey
cli%
cli% setnet ntp -add -key <ID> <NTP_Server_IP>

Check Contents

Verify the NTP server is configured to utilize a valid key using the following command:

cli% shownet -d
Example output:

Detailed information about configured NTP servers
16.110.135.123 :
10.157.44.5 : key 1

If "Detailed information about configured NTP servers" does not display an NTP server with a key, this is a finding.

The HPE Alletra Storage ArcusOS device must authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key