OpenControls Logo

STIG Viewer

STIGViewer Support

RHEL 8, for certificate-based authentication, must enforce authorized access to the corresponding private key.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-230230RHEL-08-010100SV-230230r1069287_ruleCCI-000186medium
Description
If an unauthorized user obtains access to a private key without a passcode, that user would have unauthorized access to any system where the associated public key has been installed.
STIGDate
Red Hat Enterprise Linux 8 Security Technical Implementation Guide2025-05-14

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

IAC-10.2PKI-Based Authentication
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (55) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-10Concurrent Session Control
1.00
AC-12Session Termination
1.00
AC-17(10)Authenticate Remote Commands
1.00
AC-2(1)Automated System Account Management
1.00
AC-2(11)Usage Conditions
1.00
AC-2(2)Automated Temporary and Emergency Account Management
1.00
AC-2(3)Disable Accounts
1.00
AC-2(4)Automated Audit Actions
1.00
AC-3Access Enforcement
1.00
AC-3(4)Discretionary Access Control
1.00

+45 more (top 10 by confidence shown)

CCI1 mapping
CCI-000186
1.00

Details

Check Text (C-230230r1069287_chk)

Verify the SSH private key files have a passcode. For each private key stored on the system, use the following command: $ sudo ssh-keygen -y -f /path/to/file Enter passphrase: If the contents of the key are displayed, this is a finding.

Fix Text (F-32874r1069183_fix)

Create a new private and public key pair that utilizes a passcode with the following command: $ sudo ssh-keygen -p -f /path/to/file