What changed in Soaring Software Solutions TCMax 9.x STIG V1R2V1R2 changes

Soaring Software Solutions TCMax 9.x STIG V1R2 (2026-09-30) replaced V1R1 (2026-02-26): 2 checks updated. It has 17 checks, against 17 in V1R1.

V1R2 checklistV1R1 checklist Compare V1R1 and V1R2 in STIG Compare

  • 0 added
  • 0 removed
  • 2 updated

Updated fields: Check text 1Fix text 1Title 1Discussion 1

Updated in V1R2 (2)

V-281375CAT IITCMax must enforce a 180-day maximum password lifetime restriction.Title, Check text, Fix text

Title

TCMax must enforce a 6180-day maximum password lifetime restriction.

Check text

1. Using an account of appropriate privileges to access TCMax, go to Settings >> User Options. 2. Click the "Configure" menu option at the top of the window, then click "Account Security Policy". If "Enable Password Enforcement Policy" is unchecked, this is a finding. If "Days Until Password Expires" is more than "60180", this is a finding.

Fix text

1. Using an account of appropriate privileges to access TCMax, go to Settings >> User Options. 2. Click the "Configure" menu option at the top of the window, then click "Account Security Policy". 3. Ensure "Enable Password Enforcement Policy" is checked. 4. Set "Days Until Password Expires" to "60180" or fewer.

V-281375 in V1R2

V-281377CAT IITCMax must accept personal identity verification (PIV) credentials.Discussion

Discussion

Using PIV credentials facilitates standardization and reduces the risk of unauthorized access. DODDoW has mandated using the common access card (CAC) to support identity management and personal authentication for systems covered under HSPD 12, as well as a primary component of layered protection for national security systems. Satisfies: SRG-APP-000391, SRG-APP-000392

V-281377 in V1R2

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R2 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.