← Back to Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

V-286588

CAT II (Medium)

The UAG must perform initial validation of user Public Key Infrastructure (PKI) credentials.

Rule ID

SV-286588r1294288_rule

STIG

Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000766 CCI-004046

Discussion

The UAG must be configured to perform initial validation of user common access card (CAC) certificates before passing authentication on to the Horizon server. The UAG does not perform authentication itself. This is done on the Horizon server, but it can ensure that the user certificate is trusted and allowed to attempt authentication. Satisfies: SRG-NET-000140-ALG-000094, SRG-NET-000339-ALG-000090

Check Content

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to General Settings >> Edge Service Settings. Toggle the slider to show the settings.

Click the gear icon next to "X.509 Certificate".

If the "Enable X.509 Certificate" is not toggled, this is a finding.

Fix Text

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to General Settings >> Authentication Settings. Toggle the slider to show the settings.

Click the gear icon next to "X.509 Certificate".

Toggle the slider next to "Enable X.509 Certificate". 

Click "Save".