Solaris 11 X86 Security Technical Implementation Guide

The Solaris 11 X86 Security Technical Implementation Guide (V3 R7) has 214 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

214STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

Systems must employ cryptographic hashes for passwords using the SHA-2 family of algorithms or FIPS 140-2 approved successors.

Solaris 11 X86 Security Technical Implementation Guide

Assessment Title

Rule Text

Systems must employ cryptographic hashes for passwords using the SHA-2 family of algorithms or FIPS 140-2 approved successors.

Description

Discussion Text

Cryptographic hashes provide quick password authentication while not actually storing the password.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216098

Rule

SV-216098r1016291_rule

Severity

medium

Rule Version

SOL-11.1-040130

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine which cryptographic algorithms are configured.

# grep ^CRYPT /etc/security/policy.conf

If the command output does not include the lines below, this is a finding.

CRYPT_DEFAULT=6
CRYPT_ALGORITHMS_ALLOW=5,6

Implementation Procedure

Fix Text

The root role is required.

Configure the system to disallow the use of UNIX encryption and enable SHA256 as the default encryption hash.

# pfedit /etc/security/policy.conf

Check that the following lines exist and are not commented out:

CRYPT_DEFAULT=6
CRYPT_ALGORITHMS_ALLOW=5,6

STIG check 71 of 214 in the Solaris 11 X86 STIG checklist

← Previous · V-216097The system must not have accounts configured with blank or null passwords.Next · V-216099 →The system must disable accounts after three consecutive unsuccessful login attempts.