Detections
Analytics

1.116 APPL-26-003001

Information

The macOS system must issue or obtain public key certificates from an approved service provider.

GROUP ID: V-277143
RULE ID: SV-277143r1148881

The organization must issue or obtain public key certificates from an organization-approved service provider and ensure only approved trust anchors are in the System Keychain.

Satisfies: SRG-OS-000403-GPOS-00182, SRG-OS-000775-GPOS-00230

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure the macOS system to issue or obtain public key certificates from an approved service provider by obtaining the approved certificates from the appropriate authority and install them to the System Keychain.

See Also

https://workbench.cisecurity.org/benchmarks/26538

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-23(5), CCI|CCI-002470, CCI|CCI-004909, Rule-ID|SV-277143r1148881_rule, STIG-ID|APPL-26-003001, Vuln-ID|V-277143

Plugin: Unix

Control ID: 64ec58667be3894dd8e1055cefadede2ea3daa67445edd46c0f8b7c47e83f408