Innoslate must map the authenticated identity to the individual user or group account for PKI-based authentication.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254094	SPEC-IN-000390	SV-254094r845258_rule		High

Description

Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis.

STIG	Date
SPEC Innovations Innoslate 4.x Security Technical Implementation Guide	2022-08-31

Details

Check Text (C-57579r845256_chk)

Open the settings.properties file [Path] and verify the AUTHENTICATION_TYPE is set to "CAC".

If AUTHENTICATION_TYPE is not set to "CAC", this is a finding.

Fix Text (F-57530r845257_fix)

1. Open the settings.properties file [Path].
2. Change the AUTHENTICATION_TYPE to "CAC".
3. Save.
4. Restart the Innoslate service.