Detections
Analytics

1.40 CISC-ND-001440

Information

The Cisco switch must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.

GROUP ID: V-220515
RULE ID: SV-220515r991969

For user certificates, each organization obtains certificates from an approved, shared service provider, as required by OMB policy. For federal agencies operating a legacy public key infrastructure cross-certified with the Federal Bridge Certification Authority (CA) at medium assurance or higher, this CA will suffice.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Ensure that certificate requests are only sent to DOD or DOD-approved service providers.

See Also

https://workbench.cisecurity.org/benchmarks/26427

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-17, CCI|CCI-001159, CCI|CCI-004909, Rule-ID|SV-220515r991969_rule, STIG-ID|CISC-ND-001440, Vuln-ID|V-220515

Plugin: Cisco

Control ID: 97857d64d1c4c316ccf1d959df415722b92095db716bf117cec0de4c009f3d50