Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Splunk Enterprise must accept the DOD CAC or other PKI credential for identity management and personal authentication.
Description
Discussion Text
The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access.
DOD has mandated the use of the CAC to support identity management and personal authentication for systems covered under Homeland Security Presidential Directive (HSPD) 12, as well as a primary component of layered protection for national security systems. DOD has approved other methods of PKI, including YubiKey, RSA tokens, etc.
If the application cannot meet this requirement, the risk may be mitigated through use of an authentication server.
DOD has mandated the use of the CAC to support identity management and personal authentication for systems covered under Homeland Security Presidential Directive (HSPD) 12, as well as a primary component of layered protection for national security systems. DOD has approved other methods of PKI, including YubiKey, RSA tokens, etc.
If the application cannot meet this requirement, the risk may be mitigated through use of an authentication server.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.