Detections
Analytics

1.2.28 Ensure that encryption providers are appropriately configured

Information

Where etcd encryption is used, appropriate providers should be configured.

Where etcd encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the aescbc, kms, and secretbox are likely to be appropriate options.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Follow the Kubernetes documentation and configure a EncryptionConfig file. In this file, choose aescbc, kms, or secretbox as the encryption provider.

Impact:

None

See Also

https://workbench.cisecurity.org/benchmarks/26831

Item Details

Category: IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|IA-5(1), 800-53|SC-28, 800-53|SC-28(1), CSCv7|14.8

Plugin: Unix

Control ID: 40bb861ffa8d0ec93a59853a427a1e10acb1df2a5d36111f0196e29e7847006a