The operating system must produce, control, and distribute symmetric and asymmetric cryptographic keys using NSA-approved key management technology and processes.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-OS-000166-NA | SRG-OS-000166-NA | SRG-OS-000166-NA_rule | Medium |
| Description |
|---|
| Cryptographic key management and establishment can be performed using manual procedures or automated mechanisms with supporting manual procedures. In addition to being required for the effective operation of a cryptographic mechanism, effective cryptographic key management provides protections to maintain the availability of the information in the event of the loss of cryptographic keys by users. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2013-02-05 |
Details
| Check Text ( C-SRG-OS-000166-NA_chk ) |
|---|
| RHEL6 cannot support this requirement without assistance from an external application, policy, or service. This requirement is NA. |
| Fix Text (F-SRG-OS-000166-NA_fix) |
|---|
| This requirement is NA. No fix is required. |