UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The container platform, for PKI-based authentication, must implement a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network.


Overview

Finding ID Version Rule ID IA Controls Severity
V-233201 SRG-APP-000401-CTR-000965 SV-233201r599649_rule Medium
Description
The potential of allowing access to users who are no longer authorized (have revoked certificates) increases unless a local cache of revocation data is configured.
STIG Date
Container Platform Security Requirements Guide 2020-11-24

Details

Check Text ( C-36137r599648_chk )
Review the container platform configuration.

If the container platform is not implemented to use a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network, this is a finding.
Fix Text (F-36105r599240_fix)
Configure the container platform to implement a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network.