Cisco ACI NDM Security Technical Implementation Guide

The Cisco ACI NDM Security Technical Implementation Guide (V1 R2) has 26 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

26STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Mon Jan 05 2026

The Cisco ACI must obtain its public key certificates from an appropriate certificate policy through an approved service provider.

Cisco ACI NDM Security Technical Implementation Guide

Assessment Title

Rule Text

The Cisco ACI must obtain its public key certificates from an appropriate certificate policy through an approved service provider.

Description

Discussion Text

After the Cisco ACI is initialized, it uses the self-signed certificate as the SSL certificate for HTTPS. This self-signed certificate is neither appropriate nor approved for use in DOD.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-271922

Rule

SV-271922r1168360_rule

Severity

medium

Rule Version

CACI-ND-000007

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the GUI menu bar:
1. Navigate to Admin >> AAA >> Security >> Certificate Authorities.
2. Verify the Issuer is an approved CA.

If the Cisco ACI does not obtain its public key certificates from an approved certificate policy through an approved service provider, this is a finding.

Implementation Procedure

Fix Text

From the GUI menu bar:
1. Navigate to Admin >> AAA >> Security >> Certificate Authorities.
2. Complete the form to configure CA root certificate. 
3. Click "Submit".

STIG check 7 of 26 in the Cisco ACI NDM STIG checklist

← Previous · V-271921The Cisco ACI must conduct backups of the configuration weekly or at an organization-defined frequency and store on a separate device.Next · V-271923 →The Cisco ACI must use DOD-approved Network Time Protocol (NTP) sources that use authentication that is cryptographically based.