Automation Controller must only allow the use of DOD PKI-established certificate authorities for verification of the establishment of protected sessions.
An XCCDF Rule
Description
An untrusted source may leave the system vulnerable to issues such as unauthorized access, reduced data integrity, loss of confidentiality, etc. Satisfies: SRG-APP-000427-AS-000264, SRG-APP-000514-AS-000137
- ID
- SV-256910r961596_rule
- Version
- APAS-AT-000110
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
For each Automation Controller host, the administrator must:
Download the >><organizationally defined intermediate certificate file in PEM format>>>;
Generate the appropriate /etc/tower/tower.key files, certificates, and CSRs and have the organizationally defined PKI authority issue a certificate signed by the >><organizationally defined intermediate certificate file in PEM format>>>;