The Tanium Operating System (TanOS) must enforce a minimum 15-character password length.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-254846	SRG-OS-000078	TANS-OS-000285	SV-254846r1067740_rule	2025-02-11	2

Description
The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. Use of more characters in a password helps to exponentially increase the time and/or resources required to compromise the password.

Description

The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. Use of more characters in a password helps to exponentially increase the time and/or resources required to compromise the password.

ℹ️ Check
1. Access the Tanium Server interactively. 2. Log on to the TanOS server with the tanadmin role. 3. Press "C" for "User Administration Menu". 4. Press "L" for "Local Tanium User Management". 5. Press "B" for "Security Policy Local Authentication Service". If "Password Minimum Length" is not set to 15, this is a finding.

✔️ Fix
1. Access the Tanium Server interactively. 2. Log on to the TanOS server with the tanadmin role. 3. Press "C" for "User Administration Menu". 4. Press "L" for "Local Tanium User Management". 5. Press "B" for "Security Policy Local Authentication Service". 6. Type "Yes". 7. Press "Enter" to accept the current value for "Minimum password lifetime in days [0 - 20]:". 8. Press "Enter" to accept the current value for "Maximum password lifetime in days [MinAge - 360]:". 9. Set the value for "Minimum password length in characters [0 - 30]:" to "15". 10. Press "Enter" to accept the current values for the rest of the options. 11. Type "Yes" to apply the new security policy.

✔️ Fix

1. Access the Tanium Server interactively. 2. Log on to the TanOS server with the tanadmin role. 3. Press "C" for "User Administration Menu". 4. Press "L" for "Local Tanium User Management". 5. Press "B" for "Security Policy Local Authentication Service". 6. Type "Yes". 7. Press "Enter" to accept the current value for "Minimum password lifetime in days [0 - 20]:". 8. Press "Enter" to accept the current value for "Maximum password lifetime in days [MinAge - 360]:". 9. Set the value for "Minimum password length in characters [0 - 30]:" to "15". 10. Press "Enter" to accept the current values for the rest of the options. 11. Type "Yes" to apply the new security policy.