AlmaLinux OS 9 must have the openssl-pkcs11 package installed.

Severity
Group ID
Group Title
Version
Rule ID
Date
STIG Version
mediumV-269373SRG-OS-000377-GPOS-00162ALMA-09-034010SV-269373r1050256_rule2025-02-201
Description
The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access. DOD has mandated the use of the CAC to support identity management and personal authentication for systems covered under Homeland Security Presidential Directive (HSPD) 12, as well as making the CAC a primary component of layered protection for national security systems. Satisfies: SRG-OS-000377-GPOS-00162, SRG-OS-000376-GPOS-00161, SRG-OS-000375-GPOS-00160, SRG-OS-000105-GPOS-00052
ℹ️ Check
Note: If the System Administrator demonstrates the use of an approved alternate multifactor authentication method, this requirement is Not Applicable. Verify that AlmaLinux OS 9 has the openssl-pkcs11 package installed with the following command: $ dnf list --installed openssl-pkcs11 Installed Packages openssl-pkcs11.x86_64 0.4.11-7.el9 @baseos If the "openssl-pkcs11" package is not installed, this is a finding.
✔️ Fix
The openssl-pkcs11 package can be installed with the following command: $ dnf install openssl-pkcs11