documentation_complete: true

title: 'Enable The Web Console To Use PKI'

description: 'PKI should be enabled for the Web Console.'

rationale: |-
    All applications requiring user authentication to access sensitive data
    must be PK-enabled in compliance with DoDI 8520.2 PKI and PK Enabling
    and are required to credentials approved under the DoD PKI program.

severity: medium

identifiers:
    cce: ""

references:
    cis: ""
    disa: ""
    nist: ""

ocil_clause: 'the web console is not configured to use PKI'
