Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

AAA Services Security Requirements Guide

The AAA Services Security Requirements Guide (V2 R3) has 77 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

77STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Wed Sep 30 2026

AAA Services must be configured to map the authenticated identity to the user account for PKI-based authentication.

AAA Services Security Requirements Guide

Assessment Title

Rule Text

Description

Discussion Text

Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-204678

Rule

SV-204678r961044_rule

Severity

medium

Rule Version

SRG-APP-000177-AAA-000600

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If AAA Services rely on directory services for user account management, this is not applicable and the connected directory services must perform this function.

Verify AAA Services are configured to map the authenticated identity to the user account for PKI-based authentication.

If AAA Services are not configured to map the authenticated identity to the user account, this is a finding.

Implementation Procedure

Fix Text

Configure AAA Services to map the authenticated identity to the user account for PKI-based authentication.

STIG check 40 of 77 in the AAA Services Security Requirements Guide checklist

← Previous · V-204677AAA Services must be configured to enforce authorized access to the corresponding private key for PKI-based authentication.Next · V-204679 →AAA Services must be configured to protect the confidentiality and integrity of all information at rest.