STIGQter STIGQter: STIG Summary: Nokia Service Router OS 25.x Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must be configured to include only approved trust anchors in trust stores or certificate stores managed by the organization.

DISA Rule

SV-283793r1203590_rule

Vulnerability Number

V-283793

Group Title

SRG-APP-000910-NDM-000300

Rule Version

NOKI-ND-001020

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Nokia router to include only approved trust anchors in trust stores or certificate stores managed by the organization.

Configure the TLS certification profile:

- configure system security tls cert-profile <profile name> create
- entry <id> create
- cert <cert file name>
- key <key file name>

Configure TLS-approved trust anchors:

- configure system security tls trust-anchor-profile <name> create
- trust-anchor <ca profile name>

Check Contents

Verify the Nokia router is configured to include only approved trust anchors in trust stores or certificate stores managed by the organization.

Use the command below to view the trust anchor information for TLS:

- show system security tls trust-anchor-profile

If the Nokia router is not configured to include only approved trust anchors in trust stores or certificate stores managed by the organization, this is a finding.

Vulnerability Number

V-283793

Documentable

False

Rule Version

NOKI-ND-001020

Severity Override Guidance

Verify the Nokia router is configured to include only approved trust anchors in trust stores or certificate stores managed by the organization.

Use the command below to view the trust anchor information for TLS:

- show system security tls trust-anchor-profile

If the Nokia router is not configured to include only approved trust anchors in trust stores or certificate stores managed by the organization, this is a finding.

Check Content Reference

M

Target Key

5744