Two-factor authentication with the https-server server

높음레벨 1자동aruba-cx

설명

Two-factor authentication provides an additional level of security by requiring administrators to perform X.509 certificate-based authentication with the AOS-CX https- server. The two factors are possession of the certificate private key and knowledge of the password associated with the certificate private key. The switch must be configured with the corresponding CA certificate which issued the administrator's certificate. PASS requires certificate (two-factor) authentication on the https-server. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

점검 방법

감사 방식: 구성 패턴

패턴: (?m)^https-server authentication certificate\b

조치 방법

조치 방식: 가이드 또는 인프라 패치

https-server authentication certificate authorization radius username common_name # CIS guidance: https-server authentication certificate authorization radius username common_name

속성

운영 체제: 모두
태그: aruba-cxauthentication
참고 자료: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.9.3 Two-factor authentication with the https-server server

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aruba-cx