The Tanium application must retain the session lock until the user reestablishes access using established identification and authentication procedures.
An XCCDF Rule
Description
<VulnDiscussion>Unattended systems are susceptible to unauthorized use and should be locked when unattended. This protects critical and sensitive data from exposure to unauthorized personnel with physical access to the system.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-253814r842470_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Use the vendor documentation titled "Smart card authentication" to implement correct configuration settings for this requirement.
Vendor documentation can be downloaded from https://docs.tanium.com/platform_deployment_reference/platform_deployment_reference/smart_card_authentication.html?Highlight=cac.
1. Access the Tanium Server.