IA-02(04) Local Access to Non-privileged Accounts

STIG rules that implement this control 7

Application Security and Development V6R5

• APSC-DV-001600 CAT II The application must use multifactor (e.g., CAC, Alt. Token) authentication for local access to nonprivileged accounts.

Canonical Ubuntu 22.04 LTS V2R10

• UBTU-22-612010 CAT II Ubuntu 22.04 LTS must implement multifactor authentication for remote access to privileged accounts in such a way that one of the factors is provided by a device separate from the system gaining access.
• UBTU-22-612020 CAT II Ubuntu 22.04 LTS must implement smart card logins for multifactor authentication for local and network access to privileged and nonprivileged accounts.

Microsoft Windows Server 2022 V2R11

• WN22-DC-000310 CAT II Windows Server 2022 Active Directory user accounts, including administrators, must be configured to require the use of a Common Access Card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication.

Microsoft Windows Server 2025 V1R4

• WN25-SH-000030 CAT II Windows Server 2025 OpenSSH must accept public key authentication.

Red Hat Enterprise Linux 9 V2R10

• RHEL-09-255035 CAT II RHEL 9 SSHD must accept public key authentication.
• RHEL-09-611160 CAT II RHEL 9 must use the common access card (CAC) smart card driver.