Skip to content
Log In

SRG-OS-000033-GPOS-00014

The operating system must implement DoD-approved encryption to protect the confidentiality of remote access sessions.

Harden SSH client Crypto Policy

29 rules found Severity: Medium

Logo

Configure Libreswan to use System Crypto Policy

17 rules found Severity: High

Logo

Install the dracut-fips-aesni Package

5 rules found Severity: Medium

Logo

Install the dracut-fips Package

5 rules found Severity: Medium

Logo

Enable FIPS Mode in GRUB2

5 rules found Severity: High

Logo

Harden SSHD Crypto Policy

12 rules found Severity: Medium

Logo

Force frequent session key renegotiation

31 rules found Severity: Medium

Logo

Use Only FIPS 140-2 Validated Ciphers

22 rules found Severity: Medium

Logo

Set kernel parameter 'crypto.fips_enabled' to 1

11 rules found Severity: High

Logo

Configure SSH Client to Use FIPS 140-2 Validated Ciphers: openssh.config

7 rules found Severity: High

Logo

Configure session renegotiation for SSH client

9 rules found Severity: Medium

Logo