Lightweight Directory Access Protocol (LDAP) authentication
For compliance, LDAP authentication must only be over FIPS 140-3 mode, TLS 1.0 or better, with compliant cipher lists and certificate verification.
Standards
FIPS 140-3, CC-NDcPP
CLI configuration commands
ldap ssl mode tls
ldap ssl cert-verify
ldap ssl min-version {tls1 | tls1.1 | tls1.2}
ldap ssl cipher-list {fips | fips-high-security | cc-ndpp | cc-ndpp-high-security | fips-and-cc-ndpp | fips-and-cc-ndpp-high-security}
CLI show command
show ldap
Local password security
For compliance, local passwords must have a minimum of 15 characters, including 1 uppercase, 1 lowercase, 1 numeral, and 1 special character.
Standards
CC-NDcPP
CLI configuration commands
aaa authentication password local length minimum 15
aaa authentication password local character-type upper-case 1
aaa authentication password local character-type lower-case 1
aaa authentication password local character-type numeral 1
aaa authentication password local character-type special 1
CLI show command
show aaa authentication password