The Tanium Server certificates must have Extended Key Usage entries for the serverAuth object TLS Web Server Authentication and the clientAuth object TLS Web Client Authentication.
An XCCDF Rule
Description
Restricting this setting limits the user's ability to change their password. Passwords must be changed at specific policy-based intervals; however, if the application allows the user to immediately and continually change their password, it could be changed repeatedly in a short period of time to defeat the organization's policy regarding password reuse.
- ID
- SV-253851r997273_rule
- Version
- TANS-SV-000020
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Request or regenerate the certificate being used to include both the "Server Authentication" and "Client Authentication" objects.