Detections
Analytics
JBOS-AS-000730 - The JBoss server must be configured to use DoD- or CNSS-approved PKI Class 3 or Class 4 certificates.
Information
Class 3 PKI certificates are used for servers and software signing rather than for identifying individuals. Class 4 certificates are used for business-to-business transactions. Utilizing unapproved certificates not issued or approved by DoD or CNS creates an integrity risk. The application server must utilize approved DoD or CNS Class 3 or Class 4 certificates for software signing and business-to-business transactions.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Configure the application server to use DoD- or CNSS-approved Class 3 or Class 4 PKI certificates.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_JBoss_EAP_6-3_V2R6_STIG.zip
Item Details
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-13, CAT|II, CCI|CCI-002450, Rule-ID|SV-213558r961857_rule, STIG-ID|JBOS-AS-000730, STIG-Legacy|SV-76833, STIG-Legacy|V-62343, Vuln-ID|V-213558
Plugin: Unix
Control ID: 038b5862de12d6e691a1d59a892e369a8f4f26179f5f87c22750216d07dc22d6