Enabling additional STIG hardening

Last Updated : Mar 01, 2022 |
Prolog information
The Security Technical Implementation Guides (STIGs) are the requirements that, when implemented, enhance application security and monitoring capabilities. By default, Avaya Aura® Device Services enables essential STIG hardening options during the system layer installation or upgrade. These default settings are appropriate for most deployments. If your organization requires stricter STIG compliance, use this procedure to enable additional Linux STIG security hardening options.
Important:
You cannot enable additional STIG hardening in software-only deployments.
You must enable or disable the STIG before installing Avaya Aura® Device Services. Do not modify the STIG status on a system where Avaya Aura® Device Services is already installed.
For Avaya Aura® Device Services 10.3 Release, if STIG is enabled, before Avaya Aura® Device Services installation, do the following:
  1. Log in to the AADS server as an administrator then switch to the root user.
  2. Run the /opt/Avaya/bin/sys/aads-pre-post-harden.bin command.
  3. Select 0 to pre-installation hardening.
Note:
After you enable additional STIG hardening, ensure that the length of the automatic backup password is at least 15 characters.
  1. Log in to the virtual machine with the Avaya Aura® Device Services OVA as an administrator.
  2. Run the following command to enable additional STIG hardening options:
    ADDITIONAL INFORMATION: sys secconfig --stig --enable
  3. When prompted, press c to apply new password rules.
  4. To review the STIG hardening status, run the following command:
    ADDITIONAL INFORMATION: sys secconfig --stig --query