Skip to content

Dragos Platform must accept the DOD CAC or other PKI credential for identity management and personal authentication.

An XCCDF Rule

Description

The use of Personal Identity Verification (PIV) credentials facilitates standardization and reduces the risk of unauthorized access. PIV credentials are those credentials issued by federal agencies that conform to FIPS Publication 201 and supporting guidance documents. OMB Memorandum 11-11 requires federal agencies to continue implementing the requirements specified in HSPD-12 to enable agency-wide use of PIV credentials. Satisfies: SRG-APP-000402, SRG-APP-000403, SRG-APP-000391, SRG-APP-000392, SRG-APP-000402, SRG-APP-000403, SRG-APP-000177, SRG-APP-000176, SRG-APP-000175, SRG-APP-000401

ID
SV-271034r1057745_rule
Version
DRAG-OT-001750
Severity
Medium
Updated

Remediation Templates

A Manual Procedure

Configure an SSO proxy service using LDAP to provide PKI credentials.