Ensure SP800-131a recommendation is used for stronger cryptographic keys and more robust algorithms.

높음레벨 2수동 검토websphere

설명

The National Institute of Standards and Technology (NIST) SP800-131a recommendation enforces stronger cryptographic keys and more robust algorithms. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

The SP800-131a recommendation can be enforced by setting the system property com.ibm.jsse2.sp800-131 to strict when using IBM JDK. For other JDKs, follow their specific instructions. Set com.ibm.jsse2.sp800-131=strict in the jvm.options file. More information on how to set the system properties provided in the reference section. grep -w -R -i 'com.ibm.jsse2.sp800-131=strict' ${server.config.dir}

조치 방법

조치 방식: 가이드 또는 인프라 패치

Configure the system property -Dcom.ibm.jsse2.sp800-131 to strict in the jvm.options file. The link in reference section provides more information on how to customize the Liberty environment with system properties. In the jvm.options file add the following -Dcom.ibm.jsse2.sp800-131=strict ...

속성

운영 체제: 모두
태그: webspheremanual-review
참고 자료: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 4.2.14 Ensure SP800-131a recommendation is used for stronger cryptographic keys and more robust algorithms.