The Tanium application must be configured for LDAP user/group synchronization to map the authenticated identity to the individual user or group account for PKI-based authentication.

An XCCDF Rule

Description

<VulnDiscussion>Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-254915r867645_rule
Severity: Medium
References: CCI-000187
Updated: about 1 year ago

1. Using a web browser on a system that has connectivity to the Tanium Application, access the Tanium Application web user interface (UI) and log on with multi-factor authentication.   

2. Click "Administration" on the top navigation banner.   

3. Under "Configuration," select "LDAP/AD Sync Configurations".   
4. Verify a sync exists under "Enabled Servers".  

5. If no sync exists, click "Add Server".  

6. Fill in the correct information for connecting to the organizations LDAP server. Work with a systems administrator to get this information if necessary.  

7. Click "Save".

8. If a sync exists and it is disabled, click the edit icon.

9. Change the status to "enabled".

10. Click "Save".

The Tanium application must be configured for LDAP user/group synchronization to map the authenticated identity to the individual user or group account for PKI-based authentication.

Description

Remediation - Manual Procedure