Detections
Analytics

2.14.1 (L1) Ensure 'Enable or disable PIN-less authentication for remote access hosts' is set to 'Disabled'

Information

Chrome allows a user to opt out of using user-specified PIN authentication and instead pair clients and hosts during connection time.

The recommended state for this setting is: Disabled (0)

If this setting is enabled, users can opt to pair clients and hosts at connection time, eliminating the need to enter a PIN every time.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Remote access\Enable or disable PIN-less authentication for remote access hosts

Impact:

If this setting is disabled, users will be required to enter PIN every time.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AC-17, 800-53|AC-17(1), 800-53|SC-7, 800-53|SI-4, CSCv7|12.12

Plugin: Windows

Control ID: 2a35854c04f767f686d13f0a7eff2c281b40736c5819c09a889bed6405fa797d