CCI-001159
Issue public key certificates under an organization-defined certificate policy or obtain public key certificates from an approved service provider.
The A10 Networks ADC must use DoD-approved PKI rather than proprietary or self-signed device certificates.
1 rule found Severity: Medium

The DBN-6300 must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The FortiGate device must use DoD-approved Certificate Authorities (CAs) for public key certificates.
1 rule found Severity: Medium

CounterACT must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
2 rules found Severity: Medium

The HP FlexFabric Switch must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The HYCU server must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The DataPower Gateway must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The MQ Appliance network device must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

MobileIron Sentry must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

If a certificate is used for the SCOM web console, this certificate must be generated by a DoD CA or CA approved by the organization.
1 rule found Severity: Low

Riverbed Optimization System (RiOS) must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The SEL-2740S must be adopted by OTSDN Controller(s) and obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

Symantec ProxySG must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The NSX-T Manager must obtain its public key certificates from an approved DoD certificate authority.
1 rule found Severity: Medium

The BIG-IP appliance must be configured to obtain its public key certificates from an appropriate certificate policy through a DoD-approved service provider.
1 rule found Severity: Medium

The Arista network device must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The Cisco ASA must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The Cisco switch must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.
3 rules found Severity: Medium

The Cisco router must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.
3 rules found Severity: Medium

1 rule found Severity: Medium

The F5 BIG-IP appliance must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The HPE Nimble must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The ICS must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

Sentry must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The Juniper EX switch must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

1 rule found Severity: Medium

The network device must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The Riverbed NetProfiler must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The TippingPoint SMS must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The Dell OS10 Switch must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

Forescout must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

AOS must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The HYCU virtual appliance must obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The Juniper router must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.
1 rule found Severity: Medium

The Juniper SRX Services Gateway must use DOD-approved PKI rather than proprietary or self-signed device certificates.
1 rule found Severity: Medium
