CCI|CCI-000199

Title

The information system enforces maximum password lifetime restrictions.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.2 WN16-00-000030WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT II
1.2 WN16-00-000030WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT II
1.2 WN19-00-000020WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II
1.2 WN19-00-000020WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II
1.2 WN22-00-000020WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.2 WN22-00-000020WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.16 VCSA-80-000079VMwareCIS VMware vSphere 8.0 vCenter STIG v1.0.0 CAT II
1.20 WN10-00-000090WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.21 WN16-00-000230WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT II
1.21 WN16-00-000230WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT II
1.21 WN19-00-000210WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II
1.21 WN19-00-000210WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II
1.21 WN22-00-000210WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.21 WN22-00-000210WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.49 WN10-AC-000025WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.52 WN16-AC-000050WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT II
1.52 WN16-AC-000050WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT II
1.52 WN19-AC-000050WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II
1.52 WN19-AC-000050WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II
1.52 WN22-AC-000050WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.52 WN22-AC-000050WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.73 SOL-11.1-040010UnixCIS Solaris 11 SPARC STIG v1.0.0 CAT II
1.73 SOL-11.1-040010UnixCIS Solaris 11 X86 STIG v1.0.0 CAT II
1.77 UBTU-22-411030UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.88 UBTU-24-400310UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.97 SLES-15-020220UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.98 SLES-15-020230UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.118 APPL-14-003008UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.180 OL08-00-020200UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.181 OL08-00-020210UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.231 WN10-SO-000280WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.266 RHEL-09-411010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.267 RHEL-09-411015UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.298 ALMA-09-037970UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.299 ALMA-09-038080UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
4.011 - Maximum password age does not meet minimum requirements.WindowsDISA Windows Vista STIG v6r41
4.026 - To the extent system capabilities permit, system mechanisms are not implemented to enforce automatic expiration of passwords.WindowsDISA Windows Vista STIG v6r41
5.5.1.7 Ensure password expiration is 60 Day maximum for new usersUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.5.1.8 Ensure password expiration is 60 Day maximum for existing passwordsUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-001126 - AIX Operating systems must enforce a 60-day maximum password lifetime restriction.UnixDISA IBM AIX 7.x STIG v3r2
ALMA-09-037970 - Passwords for existing users must have a 60-day maximum password lifetime restriction in /etc/shadow.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
ALMA-09-038080 - Passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
AOSX-13-002085 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-11-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple macOS 11 v1r5
APPL-11-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple macOS 11 v1r8
APPL-12-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple macOS 12 v1r9
APPL-13-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple macOS 13 v1r5
APPL-14-003008 - The macOS system must restrict maximum password lifetime to 60 days.UnixDISA Apple macOS 14 Sonoma STIG v2r4