IA-02(11) Remote Access — Separate Device

STIG rules that implement this control 8

Canonical Ubuntu 22.04 LTS V2R10

• UBTU-22-612010 CAT II Ubuntu 22.04 LTS must implement multifactor authentication for remote access to privileged accounts in such a way that one of the factors is provided by a device separate from the system gaining access.

Microsoft Windows Server 2022 V2R11

• WN22-DC-000310 CAT II Windows Server 2022 Active Directory user accounts, including administrators, must be configured to require the use of a Common Access Card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication.

Red Hat Enterprise Linux 9 V2R10

• RHEL-09-215075 CAT II RHEL 9 must have the openssl-pkcs11 package installed.
• RHEL-09-611165 CAT II RHEL 9 must enable certificate based smart card authentication.
• RHEL-09-611170 CAT II RHEL 9 must implement certificate status checking for multifactor authentication.
• RHEL-09-611175 CAT II RHEL 9 must have the pcsc-lite package installed.
• RHEL-09-611180 CAT II The pcscd socket on RHEL 9 must be active.
• RHEL-09-611185 CAT II RHEL 9 must have the opensc package installed.