IA-02(03) Local Access to Privileged Accounts

STIG rules that implement this control 9

Application Security and Development V6R5

• APSC-DV-001590 CAT II The application must use multifactor (Alt. Token) authentication for local access to privileged accounts.

Canonical Ubuntu 22.04 LTS V2R10

• UBTU-22-612010 CAT II Ubuntu 22.04 LTS must implement multifactor authentication for remote access to privileged accounts in such a way that one of the factors is provided by a device separate from the system gaining access.
• UBTU-22-612020 CAT II Ubuntu 22.04 LTS must implement smart card logins for multifactor authentication for local and network access to privileged and nonprivileged accounts.

Google Android 16 COBO Y26M10

• GOOG-16-007200 CAT II Google Android 16 must be configured to disable trust agents.

Microsoft Edge V2R5

• EDGE-00-000056 CAT II Suggestions of similar web pages in the event of a navigation error must be disabled.

Microsoft Windows Server 2022 V2R11

• WN22-DC-000310 CAT II Windows Server 2022 Active Directory user accounts, including administrators, must be configured to require the use of a Common Access Card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication.

Microsoft Windows Server 2025 V1R4

• WN25-SH-000030 CAT II Windows Server 2025 OpenSSH must accept public key authentication.

Red Hat Enterprise Linux 9 V2R10

• RHEL-09-255035 CAT II RHEL 9 SSHD must accept public key authentication.
• RHEL-09-611160 CAT II RHEL 9 must use the common access card (CAC) smart card driver.