Home
Security Hardening
EDB PostgreSQL Advanced Server V11 Windows OS V2R1

EDB PostgreSQL Advanced Server V11 Windows OS V2R1

EP11-00-009300 – The EDB Postgres Advanced Server must implement cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.
Details DBMSs handling data requiring ‘data at rest’ protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of...
EP11-00-004200 – The EDB Postgres Advanced Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).
Details To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and...
EP11-00-009500 – The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during preparation for transmission.
Details Information can be either unintentionally or maliciously disclosed or modified during preparation for transmission, including, for example, during aggregation,...
EP11-00-004400 – If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.
Details The DoD standard for authentication is DoD-approved PKI certificates. Authentication based on User ID and Password may be used...
EP11-00-009600 – The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during reception.
Details Information can be either unintentionally or maliciously disclosed or modified during reception, including, for example, during aggregation, at protocol...
EP11-00-004500 – The EDB Postgres Advanced Server, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.
Details The DoD standard for authentication is DoD-approved PKI certificates. A certificate’s certification path is the path from the end...
EP11-00-012700 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures – hostssl
Details Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The application must...
EP11-00-004600 – The EDB Postgres Advanced Server must enforce authorized access to all PKI private keys stored/utilized by the EDB Postgres Advanced Server.
Details The DoD standard for authentication is DoD-approved PKI certificates. PKI certificate-based authentication is performed by requiring the certificate holder...
EP11-00-004850 – The EDB Postgres Advanced Server password file must not be used.
Details The EDB Postgres password file can contain passwords to be used if the connection allows a password (and no...
EP11-00-004900 – The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection – hostssl
Details Use of weak or not validated cryptographic algorithms undermines the purposes of utilizing encryption and digital signatures to protect...

Prev Next

EDB PostgreSQL Advanced Server V11 Windows OS V2R1

EP11-00-009300 – The EDB Postgres Advanced Server must implement cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.

EP11-00-004200 – The EDB Postgres Advanced Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

EP11-00-009500 – The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during preparation for transmission.

EP11-00-004400 – If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.

EP11-00-009600 – The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during reception.

EP11-00-004500 – The EDB Postgres Advanced Server, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

EP11-00-012700 – The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures – hostssl

EP11-00-004600 – The EDB Postgres Advanced Server must enforce authorized access to all PKI private keys stored/utilized by the EDB Postgres Advanced Server.

EP11-00-004850 – The EDB Postgres Advanced Server password file must not be used.

EP11-00-004900 – The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection – hostssl