Detections
Analytics

1.24 WN16-00-000270

Information

Software certificate installation files must be removed from Windows Server 2016.

GROUP ID:V-224842
RULE ID:SV-224842r991589

Use of software certificates and their accompanying installation files for end users to access resources is less secure than the use of hardware-based certificates.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Remove any certificate installation files (*.p12 and *.pfx) found on a system.

Note: This does not apply to server-based applications that have a requirement for .p12 certificate files or Adobe PreFlight certificate files.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-224842r991589_rule, STIG-ID|WN16-00-000270

Plugin: Windows

Control ID: 378c9fcdb76d3af236f7108b811c2588d1dbcc9876ba3f4b4c0a1015fb637c5f