STIGUI
V-254094CAT I — High severitySV-254094r845258_rule

Innoslate must map the authenticated identity to the individual user or group account for PKI-based authentication.

Rule version SPEC-IN-000390 · STIG v1 · 2022-08-31

Discussion

Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis.

Check

Open the settings.properties file [Path] and verify the AUTHENTICATION_TYPE is set to "CAC".

If AUTHENTICATION_TYPE is not set to "CAC", this is a finding.

Fix

1. Open the settings.properties file [Path]. 2. Change the AUTHENTICATION_TYPE to "CAC". 3. Save. 4. Restart the Innoslate service.

Identifiers

Group ID
V-254094
Group title
SRG-APP-000177
Rule ID
SV-254094r845258_rule
Check ID
C-57579r845256_chk
Fix ID
F-57530r845257_fix