← Back to Container Platform Security Requirements Guide

V-233201

CAT II (Medium)

The container platform, for PKI-based authentication, must implement a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network.

Rule ID

SV-233201r981893_rule

STIG

Container Platform Security Requirements Guide

Version

V2R4

CCIs

CCI-004068

Discussion

The potential of allowing access to users who are no longer authorized (have revoked certificates) increases unless a local cache of revocation data is configured.

Check Content

Review the container platform configuration.

 If the container platform is not implemented to use a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network, this is a finding.

Fix Text

Configure the container platform to implement a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network.