SRG-OS-000125-GPOS-00065 Controls

STIG ID Version Title Product
ALMA-09-040390 V1R1 AlmaLinux OS 9 must enable the Pluggable Authentication Module (PAM) interface for SSHD.
OL08-00-010290 V2R3 The OL 8 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-2 validated cryptographic hash algorithms.
OL08-00-010291 V2R3 The OL 8 SSH server must be configured to use only ciphers employing FIPS 140-2 validated cryptographic algorithms.
RHEL-09-255050 V2R3 RHEL 9 must enable the Pluggable Authentication Module (PAM) interface for SSHD.
SLES-12-030180 V3R2 The SUSE operating system SSH daemon must be configured to only use Message Authentication Codes (MACs) employing FIPS 140-2 approved cryptographic hash algorithms.
SLES-15-010270 V2R3 The SUSE operating system SSH daemon must be configured to only use Message Authentication Codes (MACs) employing FIPS 140-2 approved cryptographic hash algorithms.
UBTU-18-010414 V2R15 The Ubuntu operating system must use strong authenticators in establishing nonlocal maintenance and diagnostic sessions.
UBTU-20-010035 V2R1 The Ubuntu operating system must use strong authenticators in establishing nonlocal maintenance and diagnostic sessions.
UBTU-22-255065 V2R3 Ubuntu 22.04 LTS must use strong authenticators in establishing nonlocal maintenance and diagnostic sessions.
WN10-CC-000330 V3R3 The Windows Remote Management (WinRM) client must not use Basic authentication.
WN10-CC-000345 V3R3 The Windows Remote Management (WinRM) service must not use Basic authentication.
WN10-CC-000360 V3R3 The Windows Remote Management (WinRM) client must not use Digest authentication.
WN11-CC-000330 V2R2 The Windows Remote Management (WinRM) client must not use Basic authentication.
WN11-CC-000345 V2R2 The Windows Remote Management (WinRM) service must not use Basic authentication.
WN11-CC-000360 V2R2 The Windows Remote Management (WinRM) client must not use Digest authentication.
WN16-CC-000500 V2R9 The Windows Remote Management (WinRM) client must not use Basic authentication.
WN16-CC-000520 V2R9 The Windows Remote Management (WinRM) client must not use Digest authentication.
WN16-CC-000530 V2R9 The Windows Remote Management (WinRM) service must not use Basic authentication.
WN19-CC-000470 V3R3 Windows Server 2019 Windows Remote Management (WinRM) client must not use Basic authentication.
WN19-CC-000490 V3R3 Windows Server 2019 Windows Remote Management (WinRM) client must not use Digest authentication.
WN19-CC-000500 V3R3 Windows Server 2019 Windows Remote Management (WinRM) service must not use Basic authentication.
WN22-CC-000470 V2R3 Windows Server 2022 Windows Remote Management (WinRM) client must not use Basic authentication.
WN22-CC-000490 V2R3 Windows Server 2022 Windows Remote Management (WinRM) client must not use Digest authentication.
WN22-CC-000500 V2R3 Windows Server 2022 Windows Remote Management (WinRM) service must not use Basic authentication.