STIGQter: STIG Summary: Nokia Service Router OS 25.x Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must be configured to implement a local cache of revocation data to support path discovery and validation for public key-based authentication.

DISA Rule

SV-283791r1203418_rule

Vulnerability Number

V-283791

Group Title

SRG-APP-000875-NDM-000280

Rule Version

NOKI-ND-001000

Severity

CAT II

CCI(s)

• CCI-004068 - For public key-based authentication, implement a local cache of revocation data to support path discovery and validation.

Weight

10

Fix Recommendation

Configure the Nokia router to implement a local cache of revocation data using the command below:

- configure system security pki ca-profile ocsp
- responder-url <OCSCP responder URL>
- transmission-profile <profile name>

Check Contents

Verify the Nokia router is configured to implement a local cache of revocation data to support path discovery and validation.

Use the command below to display the current cached OCSP results:

- show certificate ocsp-cache

OCSP Cache information

Entry Valid Until Cert Status
Issuer
Serial#

If the Nokia router is not configured to implement a local cache of revocation data to support path discovery and validation, this is a finding.

Vulnerability Number

V-283791

Documentable

False

Rule Version

NOKI-ND-001000

Severity Override Guidance

Verify the Nokia router is configured to implement a local cache of revocation data to support path discovery and validation.

Use the command below to display the current cached OCSP results:

- show certificate ocsp-cache

OCSP Cache information

Entry Valid Until Cert Status
Issuer
Serial#

If the Nokia router is not configured to implement a local cache of revocation data to support path discovery and validation, this is a finding.

Check Content Reference

M

Target Key

5744