Nutanix AOS must use an enterprise user management system to uniquely identify and authenticate users.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254109	NUTX-AP-000270	SV-254109r858122_rule		Medium

Description
To ensure accountability and prevent unauthorized access, application server users must be uniquely identified and authenticated. This is typically accomplished via the use of a user store which is either local (OS-based) or centralized (LDAP) in nature. To ensure support to the enterprise, the authentication must utilize an enterprise solution.

STIG	Date
Nutanix AOS 5.20.x Application Security Technical Implementation Guide	2022-08-24

Details

Check Text ( C-57594r858122_chk )
Verify that Nutanix AOS is set to use enterprise user management systems. 1. Log in to Prism Element. 2. Click on the gear icon in the upper right. 3. Navigate to the "Authentication" settings. If an Active Directory or OpenLDAP server is not configured, this is a finding. Verify that only one local user account exists as the account of last resort. Navigate to Local User Management. If more than one local user account exists, this is a finding.

Check Text ( C-57594r858122_chk )

Verify that Nutanix AOS is set to use enterprise user management systems.

1. Log in to Prism Element.
2. Click on the gear icon in the upper right.
3. Navigate to the "Authentication" settings.

If an Active Directory or OpenLDAP server is not configured, this is a finding.

Verify that only one local user account exists as the account of last resort.

Navigate to Local User Management.

If more than one local user account exists, this is a finding.

Fix Text (F-57545r846414_fix)
Configure Nutanix AOS to use an enterprise user management system to authenticate individual users. 1. Log in to Prism Element. 2. Click on the gear icon in the upper right. 3. Navigate to the Authentication settings. 4. Add an Active Directory or OpenLDAP server to the Directory List. Configure one local admin user as the account of last resort. 1. Log in to Prism Element. 2. Click on the gear icon in the upper right. 3. Navigate to "Local User Management". 4. Select "+ New Users".

Fix Text (F-57545r846414_fix)

Configure Nutanix AOS to use an enterprise user management system to authenticate individual users.

1. Log in to Prism Element.
2. Click on the gear icon in the upper right.
3. Navigate to the Authentication settings.
4. Add an Active Directory or OpenLDAP server to the Directory List.

Configure one local admin user as the account of last resort.

1. Log in to Prism Element.
2. Click on the gear icon in the upper right.
3. Navigate to "Local User Management".
4. Select "+ New Users".