The SNMP service must require the use of a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22448	GEN005306	SV-38890r1_rule	DCNR-1	Medium

Description
The SNMP service must use SHA-1 or a FIPS 140-2 approved successor for authentication and integrity.

STIG	Date
Draft AIX Security Technical Implementation Guide	2011-08-17

Details

Check Text ( C-37888r1_chk )
NOTE: This will virtually always require a manual review. Determine if the SNMP service uses a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods. The NIST CVMP web site provides a list of validated modules and the required security policies for the compliant use of such modules. Verify the module is on the NIST list and configured in accordance with the validated security policy. If it does not, this is a finding.

Check Text ( C-37888r1_chk )

NOTE: This will virtually always require a manual review. Determine if the SNMP service uses a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods. The NIST CVMP web site provides a list of validated modules and the required security policies for the compliant use of such modules. Verify the module is on the NIST list and configured in accordance with the validated security policy. If it does not, this is a finding.

Fix Text (F-33137r1_fix)
Configure the SNMP service to use a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods.