The SNMP service must require the use of a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods.

The SNMP service must require the use of a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
GEN005306-ESXI5-PF	GEN005306-ESXI5-PF	GEN005306-ESXI5-PF_rule		Medium

Description
The SNMP service must use SHA-1 or a FIPS 140-2 approved successor for authentication and integrity. Permanent finding - May need to use an application such as the Virtual Certes Enforcement Point (vCEP) Multilayer Encryption Virtual Appliance.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-GEN005306-ESXI5-PF_chk )
ESXi does not support this requirement. This is a permanent finding.

Fix Text (F-GEN005306-ESXI5-PF_fix)
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed.