An error occurred:

MS SQL Server 2016 Instance STIG

MS SQL Server 2016 Instance Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SQL6-D0-015600 V-214022 SQL Server must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to provision digital signatures. Cat I
SQL6-D0-015700 V-214023 SQL Server must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to generate and validate cryptographic hashes. Cat I
SQL6-D0-015800 V-214024 SQL Server must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the data owners requirements. Cat II
SQL6-D0-015900 V-214025 The system SQL Server must off-load audit data to a separate log management facility; this must be continuous and in near real time for systems with a network connection to the storage facility and weekly or more often for stand-alone systems. Cat II
SQL6-D0-016000 V-214026 SQL Server must configure Customer Feedback and Error Reporting. Cat II
SQL6-D0-016100 V-214027 SQL Server must configure SQL Server Usage and Error Reporting Auditing. Cat II
SQL6-D0-016200 V-214028 The SQL Server default account [sa] must be disabled. Cat I
SQL6-D0-016300 V-214029 SQL Server default account [sa] must have its name changed. Cat II
SQL6-D0-016400 V-214030 Execution of startup stored procedures must be restricted to necessary cases only. Cat II
SQL6-D0-016500 V-214031 SQL Server Mirroring endpoint must utilize AES encryption. Cat II
SQL6-D0-016600 V-214032 SQL Server Service Broker endpoint must utilize AES encryption. Cat II
SQL6-D0-016700 V-214033 SQL Server execute permissions to access the registry must be revoked, unless specifically required and approved. Cat II
SQL6-D0-016800 V-214034 Filestream must be disabled, unless specifically required and approved. Cat II
SQL6-D0-017000 V-214035 Ole Automation Procedures feature must be disabled, unless specifically required and approved. Cat II
SQL6-D0-017100 V-214036 SQL Server User Options feature must be disabled, unless specifically required and approved. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.