SRG-OS-000105-GPOS-00052 Controls

STIG IDVersionTitleProduct
ALMA-09-033240V1R2AlmaLinux OS 9 SSHD must accept public key authentication.
APPL-14-003050V2R3The macOS system must enforce multifactor authentication for logon.
APPL-14-003051V2R3The macOS system must enforce multifactor authentication for the su command.
APPL-14-003052V2R3The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.
APPL-15-003050V1R3The macOS system must enforce multifactor authentication for login.
APPL-15-003051V1R3The macOS system must enforce multifactor authentication for the su command.
APPL-15-003052V1R3The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.
OL07-00-041001V3R2The Oracle Linux operating system must have the required packages for multifactor authentication installed.
OL08-00-020250V2R4OL 8 must implement multifactor authentication for access to interactive accounts.
OL09-00-000270V1R1OL 9 must have the openssl-pkcs11 package installed.
OL09-00-002359V1R1OL 9 SSHD must accept public key authentication.
RHEL-08-020250V2R3RHEL 8 must implement smart card logon for multifactor authentication for access to interactive accounts.
RHEL-09-215075V2R4RHEL 9 must have the openssl-pkcs11 package installed.
RHEL-09-255035V2R4RHEL 9 SSHD must accept public key authentication.
UBTU-18-010427V2R15The Ubuntu operating system must implement smart card logins for multifactor authentication for access to accounts.
UBTU-20-010033V2R1The Ubuntu operating system must implement smart card logins for multifactor authentication for local and network access to privileged and nonprivileged accounts.
UBTU-22-612020V2R4Ubuntu 22.04 LTS must implement smart card logins for multifactor authentication for local and network access to privileged and nonprivileged accounts.
UBTU-24-400020V1R1Ubuntu 24.04 LTS must implement smart card logins for multifactor authentication for local and network access to privileged and nonprivileged accounts.
UBTU-24-400030V1R1Ubuntu 24.04 LTS must implement smart card logins for multifactor authentication for local and network access to privileged and nonprivileged accounts over SSH.
WN10-SO-000251V3R4Windows 10 must use multifactor authentication for local and network access to privileged and nonprivileged accounts.
WN11-SO-000251V2R3Windows 11 must use multifactor authentication for local and network access to privileged and nonprivileged accounts.
WN16-DC-000310V2R9Active Directory user accounts, including administrators, must be configured to require the use of a Common Access Card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication.
WN19-DC-000310V3R4Windows Server 2019 Active Directory user accounts, including administrators, must be configured to require the use of a Common Access Card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication.
WN22-DC-000310V2R4Windows Server 2022 Active Directory user accounts, including administrators, must be configured to require the use of a Common Access Card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication.