Detections
Analytics

1.29 WN11-00-000130

Information

Software certificate installation files must be removed from Windows 11.

GROUP ID: V-253280
RULE ID: SV-253280r991589

Use of software certificates and their accompanying installation files for end users to access resources is less secure than the use of hardware-based certificates.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Remove any certificate installation files (*.p12 and *.pfx) found on a system.

Note: This does not apply to server-based applications that have a requirement for .p12 certificate files (e.g., Oracle Wallet Manager) or Adobe PreFlight certificate files.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-253280r991589_rule, STIG-ID|WN11-00-000130, Vuln-ID|V-253280

Plugin: Windows

Control ID: 788edd1677730c08778677e6b927ab6f9f76d8d160513d55360520bc0da42775