ONTAP must be configured to implement cryptographic mechanisms using FIPS 140-2.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| high | V-246958 | SRG-APP-000412-NDM-000331 | NAOT-MA-000002 | SV-246958r961557_rule | 2024-08-22 | 2 |
| Description |
|---|
| Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore cannot be relied upon to provide confidentiality or integrity, and DoD data may be compromised. Satisfies: SRG-APP-000412-NDM-000331, SRG-APP-000411-NDM-000330, SRG-APP-000179-NDM-000265 |
| ℹ️ Check |
|---|
| Use "set -privilege advanced" reply "y" to continue and "security config show" to see if cluster FIPS mode is true. If ONTAP is not configured to implement cryptographic mechanisms using FIPS 140-2, this is a finding. |
| ✔️ Fix |
|---|
| Configure ONTAP to use cryptographic mechanisms with "set -privilege advanced" reply "y" to continue and "security config modify -is-fips-enabled true -interface SSL". |