AIX7-00-003200 - The AIX operating system must use Multi Factor Authentication - powerscMFA.pam.base


To assure accountability and prevent unauthenticated access, privileged and non-privileged users must utilize multifactor authentication to prevent potential misuse and compromise of the system.
Multifactor authentication uses two or more factors to achieve authentication.

Factors include:
1. Something you know (e.g., password/PIN);
2. Something you have (e.g., cryptographic identification device, token); and
3. Something you are (e.g., biometric).

The DoD CAC with DoD-approved PKI is an example of multifactor authentication.

Satisfies: SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00160


Install the IBM PowerSC MFA product.

See Also

Item Details


References: 800-53|IA-2(1), 800-53|IA-2(2), 800-53|IA-2(3), 800-53|IA-2(4), 800-53|IA-2(11), CAT|II, CCI|CCI-000765, CCI|CCI-000766, CCI|CCI-000767, CCI|CCI-000768, CCI|CCI-001948, Rule-ID|SV-215436r508663_rule, STIG-ID|AIX7-00-003200, STIG-Legacy|SV-103029, STIG-Legacy|V-92941, Vuln-ID|V-215436

Plugin: Unix

Control ID: d75572d80d34cec1874a04bcdc16e16d7493ab1d02995cbd279416296b9a710e