NIST 800-53 Rev 5

424 controls available

IA-5(2)moderatehigh

Public Key-based Authentication

Identification and Authentication

Control Statement

For public key-based authentication: Enforce authorized access to the corresponding private key; and Map the authenticated identity to the account of the individual or group; and When public key infrastructure (PKI) is used: Validate certificates by constructing and verifying a certification path to an accepted trust anchor, including checking certificate status information; and Implement a local cache of revocation data to support path discovery and validation.

Discussion

Public key cryptography is a valid authentication mechanism for individuals, machines, and devices. For PKI solutions, status information for certification paths includes certificate revocation lists or certificate status protocol responses. For PIV cards, certificate validation involves the construction and verification of a certification path to the Common Policy Root trust anchor, which includes certificate policy processing. Implementing a local cache of revocation data to support path discovery and validation also supports system availability in situations where organizations are unable to access revocation information via the network.

Framework
NIST SP 800-53 Rev 5
Family
Identification and Authentication
Baselines
moderate, high

Related Frameworks

5 paths across 1 framework
CCI5 mappings
CCI-000185
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000186
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000187
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001991
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004068
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent

Related STIGs

302 STIGs reach this control through 101 CCIs. Expand a row to see the responsible NICE and O*NET roles.

Operating System — Desktop

7 STIGs

Operating System — Server

47 STIGs
Oracle Linux 9 Security Technical Implementation Guide
V1R52026-02-1728 of 448 findings match
IBM AIX 7.x Security Technical Implementation Guide
V3R22026-02-0623 of 283 findings match
Show 39 more STIGs in this category →
IBM AIX 7.x Security Technical Implementation Guide
32024-08-1623 of 283 findings match
Oracle Linux 8 Security Technical Implementation Guide
V2R82026-02-1320 of 375 findings match
Amazon Linux 2023 Security Technical Implementation Guide
V1R32026-02-2717 of 187 findings match
Anduril NixOS Security Technical Implementation Guide
V1R22025-08-1914 of 103 findings match
Solaris 11 SPARC Security Technical Implementation Guide
V3R52026-02-1910 of 217 findings match
Solaris 11 X86 Security Technical Implementation Guide
V3R52026-02-1910 of 216 findings match

Operating System — Mainframe

11 STIGs
Mainframe Product Security Requirements Guide
V3R42025-09-1022 of 194 findings match
Mainframe Product Security Requirements Guide
32024-12-0522 of 193 findings match
IBM z/OS ACF2 Security Technical Implementation Guide
V9R82026-03-0915 of 225 findings match
IBM z/OS TSS Security Technical Implementation Guide
V9R82026-03-0912 of 230 findings match
IBM z/OS TSS Security Technical Implementation Guide
92025-06-2412 of 231 findings match
IBM z/OS RACF Security Technical Implementation Guide
V9R82026-03-0911 of 222 findings match
Show 3 more STIGs in this category →
CA IDMS Security Technical Implementation Guide
V2R12024-09-132 of 74 findings match

Operating System — Mobile

36 STIGs
Show 28 more STIGs in this category →

Network Device

76 STIGs
AAA Services Security Requirements Guide
V2R22024-12-0421 of 77 findings match
Domain Name System (DNS) Security Requirements Guide
42024-07-0217 of 118 findings match
Domain Name System (DNS) Security Requirements Guide
V4R22025-12-1916 of 119 findings match
Network Device Management Security Requirements Guide
V5R32025-02-1114 of 104 findings match
Network Device Management Security Requirements Guide
V5R42025-09-1014 of 105 findings match
Riverbed NetIM OS Security Technical Implementation Guide
V1R12025-10-0210 of 154 findings match
Show 68 more STIGs in this category →
Cisco ISE NDM Security Technical Implementation Guide
V2R32025-12-117 of 53 findings match
BIND 9.x Security Technical Implementation Guide
V3R22026-02-256 of 73 findings match
Cisco ASA NDM Security Technical Implementation Guide
V2R42025-12-086 of 47 findings match
Application Layer Gateway Security Requirements Guide
V2R32025-09-155 of 160 findings match
BIND 9.x Security Technical Implementation Guide
22024-02-155 of 70 findings match
Cisco ASA VPN Security Technical Implementation Guide
V2R22024-08-225 of 41 findings match
F5 NGINX Security Technical Implementation Guide
V1R12026-01-075 of 32 findings match
Cisco ACI NDM Security Technical Implementation Guide
V1R22025-12-112 of 26 findings match
RUCKUS ICX NDM Security Technical Implementation Guide
V1R12025-05-281 of 25 findings match

Database

25 STIGs
Database Security Requirements Guide
V4R52026-02-2615 of 142 findings match
Database Security Requirements Guide
42024-12-0415 of 142 findings match
Show 17 more STIGs in this category →

Web / Application Server

29 STIGs
Web Server Security Requirements Guide
V4R42025-09-1013 of 126 findings match
Web Server Security Requirements Guide
42025-02-1213 of 124 findings match
Application Server Security Requirements Guide
V4R42025-09-108 of 137 findings match
Application Server Security Requirements Guide
42025-02-118 of 128 findings match
Show 21 more STIGs in this category →

Virtualization / Container

30 STIGs
Container Platform Security Requirements Guide
V2R42025-09-1021 of 188 findings match
Container Platform Security Requirements Guide
22025-05-1521 of 187 findings match
Virtual Machine Manager Security Requirements Guide
22024-12-0619 of 193 findings match
Virtual Machine Manager Security Requirements Guide
V2R32025-09-1019 of 198 findings match
Show 22 more STIGs in this category →
Kubernetes Security Technical Implementation Guide
V2R62026-02-122 of 92 findings match

Cloud / Identity Service

4 STIGs

Endpoint Security Management

22 STIGs
Central Log Server Security Requirements Guide
V3R42026-02-1221 of 127 findings match
Central Log Server Security Requirements Guide
32024-12-0421 of 125 findings match
HYCU Protege Security Technical Implementation Guide
V1R22026-03-048 of 55 findings match
Show 14 more STIGs in this category →
ISEC7 Sphere Security Technical Implementation Guide
V3R12024-08-203 of 34 findings match
Tanium 7.x Security Technical Implementation Guide
V2R32025-05-142 of 98 findings match

Productivity Application

12 STIGs

Uncategorized

3 STIGs