The operating system must use multifactor authentication for network access to privileged accounts.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-33136	SRG-OS-000105-NA	SV-43534r1_rule		Medium

Description
Multifactor authentication is defined as using two or more factors to achieve authentication. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account. While network access to privileged UID may be supported for carrier maintenance purposes, such access is automated and does not require two-factors. Two-factor authentication is more appropriate when authenticating human users.

Description

Multifactor authentication is defined as using two or more factors to achieve authentication. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account. While network access to privileged UID may be supported for carrier maintenance purposes, such access is automated and does not require two-factors. Two-factor authentication is more appropriate when authenticating human users.

STIG	Date
Mobile Operating System Security Requirements Guide	2013-04-12

Details

Check Text ( C-41395r4_chk )
This requirement is NA for the Mobile OS SRG.

Fix Text (F-37036r2_fix)
The requirement is NA. No fix is required.