Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
All SCOM servers must be configured for FIPS 140-2 compliance.
Description
Discussion Text
Unapproved mechanisms used for authentication to the cryptographic module are not validated and therefore cannot be relied on to provide confidentiality or integrity, and DoD data may be compromised. FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules utilize authentication that meets DoD requirements. However, authentication algorithms must configure security processes to use only FIPS-approved and NIST-recommended authentication algorithms.
SCOM is FIPS-compliant out of the box with the exception of the Web Console.
SCOM is FIPS-compliant out of the box with the exception of the Web Console.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.