Detections
Analytics

CCI|CCI-001953

Title

Accepts Personal Identity Verification-compliant credentials.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.7 VCSA-80-000060VMwareCIS VMware vSphere 8.0 vCenter STIG v1.0.0 CAT II
1.8.8 Ensure users must authenticate users using MFA via a graphical user logonUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.10 Ensure required packages for multifactor authentication are installedUnixCIS Amazon Linux 2 STIG v2.0.1 STIG
1.10 Ensure required packages for multifactor authentication are installedUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.29 UBTU-24-100900UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.43 AZLX-23-001125UnixCIS Amazon Linux 2023 STIG v1.0.0 CAT II
1.44 AZLX-23-001130UnixCIS Amazon Linux 2023 STIG v1.0.0 CAT II
1.47 RHEL-10-200620UnixCIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II
1.56 SLES-15-010460UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.57 SLES-15-010470UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.58 EX19-MB-000203WindowsCIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT II
1.58 OL09-00-000270UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.62 RHEL-09-215075UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.71 SLES-15-020030UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.74 OL08-00-010410UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.80 OL09-00-000400UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.103 UBTU-22-612015UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.123 APPL-26-003020UnixCIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II
1.124 APPL-14-003020UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.124 APPL-26-003030UnixCIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II
1.125 APPL-14-003030UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.267 ALMA-09-034010UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.344 RHEL-09-611185UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
5.4.9 Ensure multifactor authentication for access to privileged accountsUnixCIS Amazon Linux 2 STIG v2.0.1 STIG
5.4.9 Ensure multifactor authentication for access to privileged accounts - PAM.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.4.10 Ensure certificate status checking for PKI authenticationUnixCIS Amazon Linux 2 STIG v2.0.1 STIG
5.4.10 Ensure certificate status checking for PKI authenticationUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-003205 - The AIX operating system must accept and verify Personal Identity Verification (PIV) credentials.UnixDISA IBM AIX 7.x STIG v3r2
ALMA-09-034010 - AlmaLinux OS 9 must have the openssl-pkcs11 package installed.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
APPL-14-003020 - The macOS system must enforce smart card authentication.UnixDISA Apple macOS 14 Sonoma STIG v2r4
APPL-14-003030 - The macOS system must allow smart card authentication.UnixDISA Apple macOS 14 Sonoma STIG v2r4
APPL-15-003020 - The macOS system must enforce smart card authentication.UnixDISA Apple macOS 15 Sequoia STIG v1r7
APPL-15-003030 - The macOS system must allow smart card authentication.UnixDISA Apple macOS 15 Sequoia STIG v1r7
APPL-26-003020 - The macOS system must enforce smart card authentication.UnixDISA Apple macOS 26 Tahoe STIG v1r2
APPL-26-003030 - The macOS system must allow smart card authentication.UnixDISA Apple macOS 26 Tahoe STIG v1r2
ARBA-VN-000490 - The VPN Gateway must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).ArubaOSDISA HPE Aruba Networking AOS VPN STIG v1r1
AZLX-23-001125 - Amazon Linux 2023 must have the opensc package installed.UnixDISA Amazon Linux 2023 STIG v1r3
AZLX-23-001130 - Amazon Linux 2023 must have the openssl-pkcs11 package installed.UnixDISA Amazon Linux 2023 STIG v1r3
Big Sur - Set Smartcard Certificate Trust to ModerateUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Set Smartcard Certificate Trust to ModerateUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Set Smartcard Certificate Trust to ModerateUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Set Smartcard Certificate Trust to ModerateUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
CASA-VN-000660 - The Cisco VPN remote access server must be configured to accept Common Access Card (CAC) credential credentials.CiscoDISA STIG Cisco ASA VPN v2r2
Catalina - Set Smartcard Certificate Trust to ModerateUnixNIST macOS Catalina v1.5.0 - All Profiles
Catalina - Set Smartcard Certificate Trust to ModerateUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Set Smartcard Certificate Trust to ModerateUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Set Smartcard Certificate Trust to ModerateUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
DKER-EE-001100 - LDAP integration in Docker Enterprise must be configured.UnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
DKER-EE-002180 - SAML integration must be enabled in Docker Enterprise.UnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
ESXI-06-100040 - The VMM must accept Personal Identity Verification (PIV) credentials.VMwareDISA VMware vSphere ESXi 6.0 STIG v1r5