Detections
Analytics

1.185 WN11-PK-000005

Information

The DoD Root CA certificates must be installed in the Trusted Root Store.

GROUP ID: V-253427
RULE ID: SV-253427r958448

To ensure secure DoD websites and DoD-signed code are properly validated, the system must trust the DoD Root Certificate Authorities (CAs). The DoD root certificates will ensure that the trust chain is established for server certificates issued from the DoD CAs.

Solution

Install the DoD Root CA certificates.
DoD Root CA 3
DoD Root CA 4
DoD Root CA 5

DoD Root CA 6

The InstallRoot tool is available on Cyber Exchange at https://cyber.mil/pki-pke/tools-configuration-files. PKI can be found at https://crl.gds.disa.mil/.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(2), CCI|CCI-000185, Rule-ID|SV-253427r958448_rule, STIG-ID|WN11-PK-000005, Vuln-ID|V-253427

Plugin: Windows

Control ID: 11784a66a28b94c96337353899d79c9e3133ba02c7b2f9007de437b71ec46076