An error occurred:

MS SQL Server 2016 Instance STIG

MS SQL Server 2016 Instance Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SQL6-D0-007900 V-213964 If DBMS authentication using passwords is employed, SQL Server must enforce the DOD standards for password complexity and lifetime. Cat I
SQL6-D0-008000 V-213965 Contained databases must use Windows principals. Cat II
SQL6-D0-008200 V-213966 If passwords are used for authentication, SQL Server must transmit only encrypted representations of passwords. Cat I
SQL6-D0-008300 V-213967 Confidentiality of information during transmission is controlled through the use of an approved TLS version. Cat I
SQL6-D0-008400 V-213968 SQL Server must enforce authorized access to all PKI private keys stored/utilized by SQL Server. Cat I
SQL6-D0-008700 V-213969 SQL Server must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for cryptographic operations. Cat I
SQL6-D0-008800 V-213970 SQL Server must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users). Cat II
SQL6-D0-009200 V-213971 SQL Server must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values. Cat II
SQL6-D0-009500 V-213972 SQL Server must protect the confidentiality and integrity of all information at rest. Cat I
SQL6-D0-009600 V-213973 The Service Master Key must be backed up and stored in a secure location that is not on the SQL Server. Cat II
SQL6-D0-009700 V-213974 The Master Key must be backed up and stored in a secure location that is not on the SQL Server. Cat II
SQL6-D0-009800 V-213975 SQL Server must prevent unauthorized and unintended information transfer via shared system resources. Cat II
SQL6-D0-009900 V-213976 SQL Server must prevent unauthorized and unintended information transfer via Instant File Initialization (IFI). Cat II
SQL6-D0-010000 V-213977 Access to database files must be limited to relevant processes and to authorized, administrative users. Cat II
SQL6-D0-010100 V-213978 SQL Server must reveal detailed error messages only to documented and approved individuals or roles. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.