The Tanium Operating System (TanOS) must enforce a minimum 15-character password length.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254846	TANS-OS-000285	SV-254846r986550_rule		Medium

Description
The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. Use of more characters in a password helps to exponentially increase the time and/or resources required to compromise the password.

Description

The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. Use of more characters in a password helps to exponentially increase the time and/or resources required to compromise the password.

STIG	Date
Tanium 7.x Operating System on TanOS Security Technical Implementation Guide	2024-06-04

Details

Check Text ( C-58459r866077_chk )
1. Access the Tanium Server interactively. 2. Log on to the TanOS server with the tanadmin role. 3. Press "C" for "User Administration Menu". 4. Press "L" for "Local Tanium User Management". 5. Press "B" for "Security Policy Local Authentication Service". If "Password Minimum Length" is not set to 15, this is a finding.

Fix Text (F-58403r866078_fix)
1. Access the Tanium Server interactively. 2. Log on to the TanOS server with the tanadmin role. 3. Press "C" for "User Administration Menu". 4. Press "L" for "Local Tanium User Management". 5. Press "B" for "Security Policy Local Authentication Service". 6. Type "Yes". 7. Press "Enter" to accept the current value for "Define the minimum password in days [0 - 20]". 8. Press "Enter" to accept the current value for "Define the maximum password lifetime in days [0-300]". 9. Set the value for "Define the maximum password length (characters) [0-30]" to "15". 11. Press "Enter" to accept the current values for the rest of the options. 12. Type "Yes" to apply the new security policy.

Fix Text (F-58403r866078_fix)

1. Access the Tanium Server interactively.

2. Log on to the TanOS server with the tanadmin role.

3. Press "C" for "User Administration Menu".

4. Press "L" for "Local Tanium User Management".

5. Press "B" for "Security Policy Local Authentication Service".

6. Type "Yes".

7. Press "Enter" to accept the current value for "Define the minimum password in days [0 - 20]".

8. Press "Enter" to accept the current value for "Define the maximum password lifetime in days [0-300]".

9. Set the value for "Define the maximum password length (characters) [0-30]" to "15".

11. Press "Enter" to accept the current values for the rest of the options.

12. Type "Yes" to apply the new security policy.