Detections
Analytics

1.173 WN19-DC-000280

Information

Windows Server 2019 domain controllers must have a PKI server certificate.

GROUP ID:V-205645
RULE ID:SV-205645r958448

Domain controllers are part of the chain of trust for PKI authentications. Without the appropriate certificate, the authenticity of the domain controller cannot be verified. Domain controllers must have a server certificate to establish authenticity as part of PKI authentications in the domain.

Solution

Obtain a server certificate for the domain controller.

See Also

https://workbench.cisecurity.org/benchmarks/22176

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(2), CAT|II, CCI|CCI-000185, Rule-ID|SV-205645r958448_rule, STIG-ID|WN19-DC-000280

Plugin: Windows

Control ID: 9ad6f530e92bd3f0be6f35dfab8a472a7c2c9f84e16517d9783a110f16d17565