Detections
Analytics

ESXI-06-000017 - The SSH daemon must be configured to only use Message Authentication Codes employing FIPS 140-2 crypto hash algorithms.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

DoD information systems are required to use FIPS 140-2 approved cryptographic hash functions. Note: This does not imply FIPS 140-2 certification.

 NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

To set the MACs setting, add or correct the following line in '/etc/ssh/sshd_config':

MACs hmac-sha1,hmac-sha2-256,hmac-sha2-512

See Also

http://iasecontent.disa.mil/stigs/zip/U_VMware_vSphere_6-0_ESXi_V1R4_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000366, Group-ID|V-63203, Rule-ID|SV-77693r1_rule, STIG-ID|ESXI-06-000017

Plugin: VMware

Control ID: 6ed296c76b43d34b0e711b25685302218e70f4385bced4afbfb94dcf0dbc94ca