1. Home
  2. Security Hardening
  3. DISA STIG VMware vSphere 6.x ESXi OS V1R5
  4. ESXI-06-000033 – The password hashes stored on the system must have been generated using a FIPS 140-2 approved cryptographic hashing algorithm.
Searching...

ESXI-06-000033 – The password hashes stored on the system must have been generated using a FIPS 140-2 approved cryptographic hashing algorithm.

Details

Systems must employ cryptographic hashes for passwords using the SHA-2 family of algorithms or FIPS 140-2 approved successors. The use of unapproved algorithms may result in weak password hashes more vulnerable to compromise.

Solution

To set the remember option, add or correct the following line in ‘/etc/pam.d/passwd’:

password sufficient /lib/security/$ISA/pam_unix.so use_authtok nullok shadow sha512 remember=5

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?
Yes No

Related Articles