neutron_use_httpsCheck-Neutron-04: Is secure protocol used for authentication?
neutron_use_httpsCheck-Neutron-04: Is secure protocol used for authentication?
horizon_csrf_cookie_secureCross-Site Request Forgery Prevention: Enable CSRF_COOKIE_SECURE (non-containerized deployments)
keystone_disable_user_account_days_inactiveSet Maximum Inactivity Period
keystone_algorithm_hashingCheck-Identity-04: Does Identity use strong hashing algorithms for PKI tokens?
horizon_csrf_cookie_secureCross-Site Request Forgery Prevention: Enable CSRF_COOKIE_SECURE (non-containerized deployments)
keystone_disable_user_account_days_inactiveSet Maximum Inactivity Period
keystone_lockout_durationSet Account Lockout Duration
cinder_conf_file_permsCheck-Block-02: Are strict permissions set for cinder config files?
cinder_file_ownershipCheck-Block-01: Is user/group ownership of config files set to root/cinder?
cinder_nas_secure_file_permissionsCheck-Block-07: Is NAS operating in secure enviornment?
horizon_file_ownershipCheck-Dashboard-01: Is user/group of config files set to root/horizon?
horizon_file_permsCheck-Dashboard-02: Are strict permissions set for horizon configuration files?
keystone_disable_admin_tokenCheck-Identity-06: Disable admin token in /etc/keystone/keystone.conf
keystone_file_ownershipCheck-Identity-01: Is user/group ownership of config files set to keystone?
keystone_file_permsCheck-Identity-02: Are strict permissions set for Identity configuration files?
neutron_file_ownershipCheck-Neutron-01: Is user/group ownership of config files set to root/neutron?
neutron_file_permsCheck-Neutron-02: Are strict permissions set for Compute configuration files?
nova_file_ownershipCheck-Compute-01: Is user/group ownership of config files set to root/nova?
nova_file_permsCheck-Compute-02: Are strict permissions set for Compute configuration files?
nova_use_keystoneCheck-Compute-03: Is keystone used for authentication?
cinder_osapi_max_request_bodyCheck-Block-08: Is max size for the body of a request set to default (114688)?
keystone_lockout_failure_attemptsSet Maximum Number of Failed Authentication Attempts
cinder_glance_tlsCheck-Block-06: Does cinder communicates with glance over TLS?
cinder_nova_tlsCheck-Block-05: Does cinder communicates with nova over TLS?
cinder_tls_enabledCheck-Block-04: Is TLS enabled for authentication?
horizon_disable_password_revealCheck-Dashboard-08: Is disable_password_reveal set to True?
horizon_password_autocompleteCheck-Dashboard-07: Is password_autocomplete set to False?
horizon_session_cookie_httponlyCheck-Dashboard-06: Is SESSION_COOKIE_HTTPONLY parameter set to True?
horizon_session_cookie_secureCheck-Dashboard-05: Is SESSION_COOKIE_SECURE parameter set to True?
horizon_use_sslCheck-Dashboard-03: Is USE_SSL parameter set to True?
keystone_use_sslCheck-Identity-03: is SSL enabled for Identity?
neutron_api_use_sslCheck-Neutron-05: Is SSL enabled on Neutron API server?
neutron_use_keystoneCheck-Neutron-03: Is keystone used for authentication?
nova_secure_authenticationCheck-Compute-04: Is secure protocol used for authentication?
nova_secure_glanceCheck-Compute-05: Does Nova communicates with Glance securely?
cinder_using_keystoneCheck-Block-03: Is keystone used for authentication?
neutron_use_httpsCheck-Neutron-04: Is secure protocol used for authentication?