From Authentication Authorization and Accounting Service Security Requirements Guide
Part of SRG-APP-000176-AAA-000059
Associated with: CCI-000186
If the private key is discovered, an attacker can use the key to authenticate as an authorized user and gain access to the network infrastructure.
Verify the AAA Service is configured to enforce authorized access to the corresponding private key for PKI-based authentication. If the AAA Service is not configured to enforce authorized access to the corresponding private key, this is a finding.
Configure the AAA Service to enforce authorized access to the corresponding private key for PKI-based authentication.
Lavender hyperlinks in small type off to the right (of CSS
class id
, if you view the page source) point to
globally unique URIs for each document and item. Copy the
link location and paste anywhere you need to talk
unambiguously about these things.
You can obtain data about documents and items in other
formats. Simply provide an HTTP header Accept:
text/turtle
or
Accept: application/rdf+xml
.
Powered by sagemincer