UCF STIG Viewer Logo

Administrative password is not configured for Desktop Units.


Overview

Finding ID Version Rule ID IA Controls Severity
V-16351 SUN0310 SV-17344r1_rule IAIA-1 IAIA-2 Medium
Description
From a physical security perspective, the DTU pop-menu is accessible, therefore a username/password or administrative only password is recommended to protect the device from unauthorized changes made locally.
STIG Date
Sun Ray 4 STIG 2015-04-02

Details

Check Text ( C-17264r1_chk )
On the Sun Ray 2fs unit press the (Stop-M) on Sun Keyboard and on the PC keyboards press the (Ctrl-Pause-M or S).
If you are not prompted for a password to enter the firmware configuration, this is a finding. To configure the password, select Security, Password, and type in the password. Make sure it is compliant with DoD password policies.

Caveat: If the (Stop-M) on the Sun keyboard or the (Ctrl-Pause-M or S) on the PC keyboards does not bring up the pop-up firmware-gui, then the pop-up function is disabled for this firmware and this is not applicable.

Note: For other Sun Ray Desktop Units, consult the system administrator or documentation for the key mode combinations.
Fix Text (F-16402r1_fix)
Configure a username / password for the DTU pop-up menu.