STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 1 hour ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to HPE Nimble Storage Array NDM Security Technical Implementation Guide

V-252198

CAT II (Medium)

The HPE Nimble must obtain its public key certificates from an appropriate certificate policy through an approved service provider.

Rule ID

SV-252198r1001013_rule

STIG

HPE Nimble Storage Array NDM Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-000366CCI-001159CCI-004068

Discussion

For user certificates, each organization obtains certificates from an approved, shared service provider, as required by OMB policy. For federal agencies operating a legacy public key infrastructure cross-certified with the Federal Bridge Certification Authority at medium assurance or higher, this Certification Authority (CA) will suffice.

Check Content

Type "cert --list". Review the output to confirm that the custom-ca and custom certificates exist, and the "Use" values specified for HTTPS and APIS are both "custom". If not, this is a finding.

Fix Text

To create and import a custom, CA-signed certificate, follow these steps:

1. Type "cert --gen custom-csr". Copy the displayed CSR and submit it to an appropriate signing authority.
2. Type "cert --import custom-ca" and paste the PEM-encoded CA certificate chain as input to the command.
3. Type "cert --import custom" and paste the signed certificate obtained from the CA.