Applications involved in the production, control, and distribution of asymmetric cryptographic keys must use must use approved PKI Class 3 certificates or prepositioned keying material.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32496	SRG-APP-000194-DB-NA	SV-42833r1_rule		Medium

Description
In addition to being required for the effective operation of a cryptographic mechanism, effective cryptographic key management provides protections to maintain the availability of the information in the event of the loss of cryptographic keys by users. This requirement is applicable to applications involved in the production, control, and distribution of asymmetric cryptographic keys and is NA for databases.

Description

In addition to being required for the effective operation of a cryptographic mechanism, effective cryptographic key management provides protections to maintain the availability of the information in the event of the loss of cryptographic keys by users. This requirement is applicable to applications involved in the production, control, and distribution of asymmetric cryptographic keys and is NA for databases.

STIG	Date
Database Security Requirements Guide	2012-07-02

Details

Check Text ( C-40934r1_chk )
This check is NA for databases.

Fix Text (F-36411r1_fix)
This fix is NA for databases.