III - Administrative Public
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000175-AS-000124
Group -
Nutanix AOS must perform RFC 5280-compliant certification path validation.
A certificate's certification path is the path from the end entity certificate to a trusted root certification authority (CA). Certification path validation is necessary for a relying party to make...Rule High Severity -
SRG-APP-000514-AS-000137
Group -
Nutanix AOS must use DoD- or CNSS-approved PKI Class 3 or Class 4 certificates.
Class 3 PKI certificates are used for servers and software signing rather than for identifying individuals. Class 4 certificates are used for business-to-business transactions. Utilizing unapproved...Rule High Severity -
SRG-APP-000231-AS-000133
Group -
Nutanix AOS must protect the confidentiality and integrity of all information at rest.
When data is written to digital media such as hard drives, mobile computers, external/removable hard drives, personal digital assistants, flash/thumb drives, etc., there is risk of data loss and da...Rule High Severity -
SRG-APP-000267-AS-000170
Group -
Nutanix AOS must restrict error messages only to authorized users.
If the application provides too much information in error logs and administrative messages to the screen, this could lead to compromise. The structure and content of error messages need to be caref...Rule Medium Severity -
SRG-APP-000211-AS-000146
Group -
Nutanix AOS must separate hosted application functionality from application server management functionality.
The application server consists of the management interface and hosted applications. By separating the management interface from hosted applications, the user must authenticate as a privileged user...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.