CCI|CCI-000199

Title

The information system enforces maximum password lifetime restrictions.

Reference Item Details

Category: 2009

Audit Items

View all Reference Audit Items

NamePluginAudit Name
4.011 - Maximum password age does not meet minimum requirements.WindowsDISA Windows Vista STIG v6r41
4.026 - To the extent system capabilities permit, system mechanisms are not implemented to enforce automatic expiration of passwords.WindowsDISA Windows Vista STIG v6r41
5.5.1.7 Ensure password expiration is 60 Day maximum for new usersUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.5.1.8 Ensure password expiration is 60 Day maximum for existing passwordsUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-001126 - AIX Operating systems must enforce a 60-day maximum password lifetime restriction - ALL usersUnixDISA STIG AIX 7.x v2r5
AIX7-00-001126 - AIX Operating systems must enforce a 60-day maximum password lifetime restriction - default userUnixDISA STIG AIX 7.x v2r5
AOSX-13-002085 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple Mac OSX 10.15 v1r8
APPL-11-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple macOS 11 v1r5
APPL-11-003008 - The macOS system must enforce a 60-day maximum password lifetime restriction.UnixDISA STIG Apple macOS 11 v1r6
Big Sur - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Catalina - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Catalina v1.5.0 - All Profiles
Catalina - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Catalina v1.5.0 - 800-171
Catalina - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Catalina v1.5.0 - 800-53r4 Low
Catalina - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Catalina v1.5.0 - 800-53r5 Low
F5BI-DM-000127 - The BIG-IP appliance must be configured to enforce a 60-day maximum password lifetime restriction.F5DISA F5 BIG-IP Device Management 11.x STIG v2r1
GEN000700 - User passwords must be changed at least every 60 days - account reportUnixDISA STIG Solaris 10 SPARC v2r2
GEN000700 - User passwords must be changed at least every 60 days - account reportUnixDISA STIG Solaris 10 X86 v2r2
GEN000700 - User passwords must be changed at least every 60 days - configuredUnixDISA STIG Solaris 10 X86 v2r2
GEN000700 - User passwords must be changed at least every 60 days - configuredUnixDISA STIG Solaris 10 SPARC v2r2
GEN000700 - User passwords must be changed at least every 60 days.UnixDISA STIG for Oracle Linux 5 v2r1
GEN000740 - All non-interactive/automated processing account passwords must be changed at least once per year or be locked.UnixDISA STIG Solaris 10 SPARC v2r2
GEN000740 - All non-interactive/automated processing account passwords must be changed at least once per year or be locked.UnixDISA STIG Solaris 10 X86 v2r2
GEN000740 - All non-interactive/automated processing account passwords must be changed at least once per year or be locked.UnixDISA STIG AIX 6.1 v1r14
GEN000740 - All non-interactive/automated processing account passwords must be changed at least once per year or be locked.UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN000740 - All non-interactive/automated processing account passwords must be changed at least once per year or be locked.UnixDISA STIG AIX 5.3 v1r2
GEN000740 - All non-interactive/automated processing account passwords must be changed at least once per year or be locked.UnixDISA STIG for Oracle Linux 5 v2r1
Monterey - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Monterey v1.0.0 - 800-171
Monterey - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Monterey v1.0.0 - 800-53r4 Low
Monterey - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Monterey v1.0.0 - CNSSI 1253
Monterey - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Monterey v1.0.0 - 800-53r5 Low
Monterey - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Monterey v1.0.0 - 800-53r5 High
Monterey - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Monterey v1.0.0 - 800-53r4 High
Monterey - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Monterey v1.0.0 - All Profiles
Monterey - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Monterey v1.0.0 - 800-53r5 Moderate
Monterey - Restrict Maximum Password Lifetime to 60 DaysUnixNIST macOS Monterey v1.0.0 - 800-53r4 Moderate