STIGUI
V-256907CAT II — Medium severitySV-256907r1207649_rule

Automation Controller must utilize encryption when using LDAP for authentication.

Rule version APAS-AT-000055 · STIG v2 · 2026-09-14

Discussion

To avoid access with malicious intent, passwords will need to be protected at all times. This includes transmission where passwords must be encrypted for security.

Check

Log in to Automation Controller as an administrator and navigate to Settings >> Authentication >> LDAP settings.

If an LDAP server is configured but the "LDAP SERVER URI" field does not start with "ldaps://", this is a finding.

Fix

Log in to Automation Controller as an administrator and navigate to Settings >> Authentication >> LDAP settings.

Click "Edit".

Modify the "LDAP SERVER URI" field so that it begins with "ldaps://".

Click "Save".

Identifiers

Group ID
V-256907
Group title
SRG-APP-000172-AS-000121
Rule ID
SV-256907r1207649_rule
Check ID
C-60582r902289_chk
Fix ID
F-60524r903514_fix