Detections
Analytics

1.5 EX19-MB-000019

Information

Exchange servers must use approved DOD certificates.

GROUP ID: V-259649
RULE ID: SV-259649r960792

Server certificates are required for many security features in Exchange; without them, the server cannot engage in many forms of secure communication.

Failure to implement valid certificates makes it virtually impossible to secure Exchange's communications.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Remove the non-DOD certificate and import the correct DOD certificates.

See Also

https://workbench.cisecurity.org/benchmarks/23653

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-259649r960792_rule, STIG-ID|EX19-MB-000019, Vuln-ID|V-259649

Plugin: Windows

Control ID: e8b006eb24a7ac563d32a1b31798d44d75927c915f5c1f5febb762d08835a198