SRG-OS-000069-GPOS-00037 Controls

STIG IDVersionTitleProduct
ALMA-09-035880V1R1AlmaLinux OS 9 must ensure the password complexity module is enabled in the password-auth file.
ALMA-09-035990V1R1AlmaLinux OS 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.
ALMA-09-036100V1R1AlmaLinux OS 9 must enforce password complexity rules for the root account.
ALMA-09-036210V1R1AlmaLinux OS 9 must enforce password complexity by requiring that at least one uppercase character be used.
UBTU-18-010100V2R15The Ubuntu operating system must enforce password complexity by requiring that at least one upper-case character be used.
UBTU-20-010050V1R9The Ubuntu operating system must enforce password complexity by requiring that at least one upper-case character be used.
UBTU-24-400260V1R1Ubuntu 24.04 LTS must enforce password complexity by requiring that at least one uppercase character be used.
WN22-AC-000080V2R1Windows Server 2022 must have the built-in Windows password complexity policy enabled.
WN10-AC-000040V2R8The built-in Microsoft password complexity filter must be enabled.
APPL-15-003060V1R1The macOS system must require that passwords contain a minimum of one lowercase character and one uppercase character.
APPL-14-003060V2R1The macOS system must require passwords contain a minimum of one lowercase character and one uppercase character.
WN11-AC-000040V2R1The built-in Microsoft password complexity filter must be enabled.
UBTU-22-611010V2R1Ubuntu 22.04 LTS must enforce password complexity by requiring at least one uppercase character be used.
RHEL-08-020100V1R9RHEL 8 must ensure the password complexity module is enabled in the password-auth file.
RHEL-08-020110V1R9RHEL 8 must enforce password complexity by requiring that at least one uppercase character be used.
RHEL-07-010118V3R8The Red Hat Enterprise Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.
RHEL-07-010119V3R8The Red Hat Enterprise Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.
RHEL-07-010120V3R8The Red Hat Enterprise Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.
RHEL-09-611010V2R1RHEL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.
RHEL-09-611040V2R1RHEL 9 must ensure the password complexity module is enabled in the password-auth file.
RHEL-09-611110V2R1RHEL 9 must enforce password complexity by requiring that at least one uppercase character be used.
OL09-00-001001V1R1OL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.
OL09-00-001005V1R1OL 9 must enforce password complexity by requiring that at least one uppercase character be used.
OL09-00-001010V1R1OL 9 must ensure the password complexity module is enabled in the password-auth file.
WN16-AC-000080V2R10Windows Server 2016 must have the built-in Windows password complexity policy enabled.
SLES-15-020130V1R9The SUSE operating system must enforce passwords that contain at least one uppercase character.
SLES-12-010150V2R13The SUSE operating system must enforce passwords that contain at least one upper-case character.
OL07-00-010118V2R14The Oracle Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.
OL07-00-010119V2R14The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.
OL07-00-010120V2R14The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.
WN19-AC-000080V2R8Windows Server 2019 must have the built-in Windows password complexity policy enabled.
OL08-00-020100V1R9OL 8 must ensure the password complexity module is enabled in the password-auth file.
OL08-00-020110V1R9OL 8 must enforce password complexity by requiring that at least one uppercase character be used.