SRG-OS-000069-GPOS-00037 Controls

STIG IDVersionTitleProduct
ALMA-09-035880V1R4AlmaLinux OS 9 must ensure the password complexity module is enabled in the password-auth file.AlmaLinux OS 9
ALMA-09-035990V1R4AlmaLinux OS 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.AlmaLinux OS 9
ALMA-09-036100V1R4AlmaLinux OS 9 must enforce password complexity rules for the root account.AlmaLinux OS 9
ALMA-09-036210V1R4AlmaLinux OS 9 must enforce password complexity by requiring that at least one uppercase character be used.AlmaLinux OS 9
APPL-14-003060V2R4The macOS system must require passwords contain a minimum of one lowercase character and one uppercase character.macOS 14 - Sonoma
APPL-15-003060V1R5The macOS system must require that passwords contain a minimum of one lowercase character and one uppercase character.macOS 15 - Sequoia
OL07-00-010118V3R3The Oracle Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.Oracle Linux 7
OL07-00-010119V3R3The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.Oracle Linux 7
OL07-00-010120V3R3The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.Oracle Linux 7
OL08-00-020100V2R6OL 8 must ensure the password complexity module is enabled in the password-auth file.Oracle Linux 8
OL08-00-020110V2R6OL 8 must enforce password complexity by requiring that at least one uppercase character be used.Oracle Linux 8
OL09-00-001001V1R3OL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.Oracle Linux 9
OL09-00-001005V1R3OL 9 must enforce password complexity by requiring that at least one uppercase character be used.Oracle Linux 9
OL09-00-001010V1R3OL 9 must ensure the password complexity module is enabled in the password-auth file.Oracle Linux 9
RHEL-07-010118V3R9The Red Hat Enterprise Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.Red Hat Enterprise Linux 7
RHEL-07-010119V3R9The Red Hat Enterprise Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.Red Hat Enterprise Linux 7
RHEL-07-010120V3R9The Red Hat Enterprise Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.Red Hat Enterprise Linux 7
RHEL-08-020100V2R5RHEL 8 must ensure the password complexity module is enabled in the password-auth file.Red Hat Enterprise Linux 8
RHEL-08-020110V2R5RHEL 8 must enforce password complexity by requiring that at least one uppercase character be used.Red Hat Enterprise Linux 8
RHEL-09-611010V2R6RHEL 9 must ensure the password complexity module in the system-auth file is configured for three retries or less.Red Hat Enterprise Linux 9
RHEL-09-611040V2R6RHEL 9 must ensure the password complexity module is enabled in the password-auth file.Red Hat Enterprise Linux 9
RHEL-09-611110V2R6RHEL 9 must enforce password complexity by requiring that at least one uppercase character be used.Red Hat Enterprise Linux 9
SLES-12-010150V3R2The SUSE operating system must enforce passwords that contain at least one upper-case character.SUSE Linux Enterprise 12
SLES-15-020130V2R4The SUSE operating system must enforce passwords that contain at least one uppercase character.SUSE Linux Enterprise 15
TOSS-04-040050V2R3TOSS must enforce password complexity by requiring that at least one uppercase character be used.Tri-Lab Operating System Stack
UBTU-18-010100V2R15The Ubuntu operating system must enforce password complexity by requiring that at least one upper-case character be used.Ubuntu 18.04
UBTU-20-010050V2R3The Ubuntu operating system must enforce password complexity by requiring that at least one upper-case character be used.Ubuntu 20.04
UBTU-22-611010V2R6Ubuntu 22.04 LTS must enforce password complexity by requiring at least one uppercase character be used.Ubuntu 22.04
UBTU-24-400260V1R1Ubuntu 24.04 LTS must enforce password complexity by requiring that at least one uppercase character be used.Ubuntu 24.04
WN10-AC-000040V3R4The built-in Microsoft password complexity filter must be enabled.Microsoft Windows 10
WN11-AC-000040V2R5The built-in Microsoft password complexity filter must be enabled.Microsoft Windows 11
WN16-AC-000080V2R9Windows Server 2016 must have the built-in Windows password complexity policy enabled.Microsoft Windows Server 2016
WN19-AC-000080V3R6Windows Server 2019 must have the built-in Windows password complexity policy enabled.Microsoft Windows Server 2019
WN22-AC-000080V2R6Windows Server 2022 must have the built-in Windows password complexity policy enabled.Microsoft Windows Server 2022