Home
Security Hardening
DISA STIG Docker Enterprise 2.x Linux Unix UCP V2R1

DISA STIG Docker Enterprise 2.x Linux Unix UCP V2R1

DKER-EE-001000 – The Docker Enterprise Per User Limit Login Session Control in the Universal Control Plane (UCP) Admin Settings must be set to an organization-defined value for all accounts and/or account types.
Details The UCP component of Docker Enterprise includes a built-in access authorization mechanism called eNZi which can be integrated with...
DKER-EE-001080 – The audit log configuration level must be set to request in the Universal Control Plane (UCP) component of Docker Enterprise.
Details The UCP and Docker Trusted Registry (DTR) components of Docker Enterprise provide audit record generation capabilities. Audit logs capture...
DKER-EE-001100 – LDAP integration in Docker Enterprise must be configured.
Details Both the Universal Control Plane (UCP) and Docker Trusted Registry (DTR) components of Docker Enterprise leverage the same authentication...
DKER-EE-001170 – A policy set using the built-in role-based access control (RBAC) capabilities in the Universal Control Plane (UCP) component of Docker Enterprise must be configured.
Details Both the UCP and Docker Trusted Registry (DTR) components of Docker Enterprise leverage the same authentication and authorization backplane...
DKER-EE-001180 – A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set – team member access
Details Both the Universal Control Plane (UCP) and DTR components of Docker Enterprise leverage the same authentication and authorization backplane...
DKER-EE-001870 – The Docker Enterprise self-signed certificates in Universal Control Plane (UCP) must be replaced with DoD trusted, signed certificates.
Details Docker Enterprise includes the following capabilities that are considered non-essential: *NOTE: disabling these capabilities negatively affects the operation of...
DKER-EE-001890 – The option in Universal Control Plane (UCP) allowing users and administrators to schedule containers on all nodes, including UCP managers and Docker Trusted Registry (DTR) nodes must be disabled in Docker Enterprise.
Details Docker Enterprise includes the following capabilities that are considered non-essential: *NOTE: disabling these capabilities negatively affects the operation of...
DKER-EE-001910 – Periodic data usage and analytics reporting in Universal Control Plane (UCP) must be disabled in Docker Enterprise.
Details Docker Enterprise includes the following capabilities that are considered non-essential: *NOTE: disabling these capabilities negatively affects the operation of...
DKER-EE-006190 – Docker Enterprise Universal Control Plane (UCP) must be integrated with a trusted certificate authority (CA).
Details When integrating the UCP and Docker Trusted Registry (DTR) management consoles with an external, trusted certificate authority (CA), both...
DKER-EE-006280 – Docker Enterprise Universal Control Plane (UCP) must be configured to use TLS 1.2.
Details By default docker UCP is configured to use TLS v1.2, if this setting is misconfigured, older protocols containing security...

DISA STIG Docker Enterprise 2.x Linux Unix UCP V2R1

DKER-EE-001000 – The Docker Enterprise Per User Limit Login Session Control in the Universal Control Plane (UCP) Admin Settings must be set to an organization-defined value for all accounts and/or account types.

DKER-EE-001080 – The audit log configuration level must be set to request in the Universal Control Plane (UCP) component of Docker Enterprise.

DKER-EE-001100 – LDAP integration in Docker Enterprise must be configured.

DKER-EE-001170 – A policy set using the built-in role-based access control (RBAC) capabilities in the Universal Control Plane (UCP) component of Docker Enterprise must be configured.

DKER-EE-001180 – A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set – team member access

DKER-EE-001870 – The Docker Enterprise self-signed certificates in Universal Control Plane (UCP) must be replaced with DoD trusted, signed certificates.

DKER-EE-001890 – The option in Universal Control Plane (UCP) allowing users and administrators to schedule containers on all nodes, including UCP managers and Docker Trusted Registry (DTR) nodes must be disabled in Docker Enterprise.

DKER-EE-001910 – Periodic data usage and analytics reporting in Universal Control Plane (UCP) must be disabled in Docker Enterprise.

DKER-EE-006190 – Docker Enterprise Universal Control Plane (UCP) must be integrated with a trusted certificate authority (CA).

DKER-EE-006280 – Docker Enterprise Universal Control Plane (UCP) must be configured to use TLS 1.2.