ONTAP must be configured to implement cryptographic mechanisms using FIPS 140-2.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

ONTAP must be configured to implement cryptographic mechanisms using FIPS 140-2.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-246958	NAOT-MA-000002	SV-246958r961557_rule		High

Description
Unapproved mechanisms that are used for authentication to the cryptographic module are not verified and therefore cannot be relied upon to provide confidentiality or integrity, and DoD data may be compromised. Satisfies: SRG-APP-000412-NDM-000331, SRG-APP-000411-NDM-000330, SRG-APP-000179-NDM-000265

STIG	Date
NetApp ONTAP DSC 9.x Security Technical Implementation Guide	2024-06-10

Details

Check Text ( C-50390r860692_chk )
Use "set -privilege advanced" reply "y" to continue and "security config show" to see if cluster FIPS mode is true. If ONTAP is not configured to implement cryptographic mechanisms using FIPS 140-2, this is a finding.

Fix Text (F-50344r945871_fix)
Configure ONTAP to use cryptographic mechanisms with "set -privilege advanced" reply "y" to continue and "security config modify -is-fips-enabled true -interface SSL".