← Back to Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

V-282603

CAT II (Medium)

TOSS 5 must implement a systemwide encryption policy.

Rule ID

SV-282603r1200789_rule

STIG

Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-002450

Discussion

Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.

Check Content

Verify the TOSS 5 cryptography policy has been configured correctly with the following commands:

$ sudo update-crypto-policies --show 

FIPS:OSPP

If the cryptography base profile is not set to "FIPS" and is not applied, this is a finding.

$ sudo update-crypto-policies --check

The configured policy matches the generated policy

If the command does not return "The configured policy matches the generated policy", this is a finding.

Fix Text

Configure TOSS 5 to implement FIPS mode with the following command:

$ sudo update-crypto-policies --set FIPS:OSPP

Reboot the system for the changes to take effect.