Detections
Analytics

2.7.3 (L2) Ensure 'Supported authentication schemes' is set to 'Enabled: ntlm, negotiate'

Information

Specifies which HTTP authentication schemes are supported by Google Chrome.

Disabled (0): Allows all supported authentication schemes.

The recommended state for this setting is: Enabled with the value of ntlm, negotiate

Possible values are 'basic', 'digest', 'ntlm' and 'negotiate'. Basic and Digest authentication do not provide sufficient security and can lead to submission of user passwords in plaintext or minimal protection (Integrated Authentication is supported for negotiate and ntlm challenges only).

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Enabled: ntlm, negotiate :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\HTTP Authentication\Supported authentication schemes

Impact:

If some legacy application(s) or website(s) required insecure authentication mechanisms they will not work correctly.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-17(2), 800-53|IA-5, 800-53|IA-5(1), 800-53|SC-8, 800-53|SC-8(1), CSCv7|16.5

Plugin: Windows

Control ID: d406f816cc23c635bfbfa16e4718ba82b254ca249f2f43d6278e8228190706f1