← Back to Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

V-286590

CAT II (Medium)

The UAG must validate certificates used for TLS functions by performing RFC 5280-compliant certification path validation.

Rule ID

SV-286590r1290933_rule

STIG

Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000185 CCI-004909

Discussion

A certificate's certification path is the path from the end entity certificate to a trusted root certification authority (CA). Certification path validation is necessary for a relying party to make an informed decision regarding acceptance of an end entity certificate. The UAG provides an "Extended Server Certificate Validation" option that will verify information including hostname match, verification status, and validity period. Satisfies: SRG-NET-000164-ALG-000100, SRG-NET-000750-ALG-000140

Check Content

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to Advanced Settings >> System Configuration.

Click the gear icon to edit.

Scroll down to the "Extended Server Certificate Validation" field.

If the "Extended Server Certificate Validation" toggle is not enabled, this is a finding.

Fix Text

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to Advanced Settings >> System Configuration.

Click the gear icon to edit.

Scroll down to the "Extended Server Certificate Validation" field and enable the toggle.

Click "Save".