SRG-OS-000393-GPOS-00173

The operating system must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications, when used for nonlocal maintenance sessions.

Details
Associations

29 rules found Severity: Medium

20 rules found Severity: High

22 rules found Severity: Medium

11 rules found Severity: High

8 rules found Severity: Medium

7 rules found Severity: High

SRG-OS-000393-GPOS-00173

Harden SSH client Crypto Policy

Configure System Cryptography Policy

Use Only FIPS 140-2 Validated Ciphers

Set kernel parameter 'crypto.fips_enabled' to 1

Install crypto-policies package

Configure OpenSSL library to use TLS Encryption

Configure SSH Client to Use FIPS 140-2 Validated Ciphers: openssh.config