The container platform must map the authenticated identity to the individual user or group account for PKI-based authentication.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-233101 | SRG-APP-000177 | SRG-APP-000177-CTR-000465 | SV-233101r961044_rule | 2024-12-05 | 2 |
| Description |
|---|
| The container platform and its components may require authentication before use. When the authentication is PKI-based, the container platform or component must map the certificate to a user account. If the certificate is not mapped to a user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis. |
| ℹ️ Check |
|---|
| Review documentation and configuration to ensure the container platform provides a PKI integration capability that meets DoD PKI infrastructure requirements. If the container platform is not configured to meet this requirement, this is a finding. |
| ✔️ Fix |
|---|
| Configure the container platform to utilize the DoD Enterprise PKI infrastructure. |