The Security Technical Implementation Guides (STIGs) are the requirements that, when implemented, enhance application security and monitoring capabilities. By default, Avaya Aura® Device Services enables essential STIG hardening options during the system layer installation or upgrade. These default settings are appropriate for most deployments. If your organization requires stricter STIG compliance, use this procedure to enable additional Linux STIG security hardening options.
Important:
You cannot enable additional STIG hardening in software-only deployments.
You must enable or disable the STIG before installing Avaya Aura® Device Services. Do not modify the STIG status on a system where Avaya Aura® Device Services is already installed.
For
Avaya Aura® Device Services 10.3 Release, if STIG is enabled, before
Avaya Aura® Device Services installation, do the following:
-
Log in to the AADS server as an administrator then switch to the root user.
-
Run the /opt/Avaya/bin/sys/aads-pre-post-harden.bin command.
-
Select 0 to pre-installation hardening.
Note:
After you enable additional STIG hardening, ensure that the length of the automatic backup password is at least 15 characters.