Detections
Analytics

1.56 WN22-AC-000090

Information

Windows Server 2022 reversible password encryption must be disabled.

GROUP ID: V-254293
RULE ID: SV-254293r1051095

Storing passwords using reversible encryption is essentially the same as storing clear-text versions of the passwords, which are easily compromised. For this reason, this policy must never be enabled.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy >> Store passwords using reversible encryption to 'Disabled'

See Also

https://workbench.cisecurity.org/benchmarks/22357

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|I, CCI|CCI-000196, CCI|CCI-004062, Rule-ID|SV-254293r1051095_rule, STIG-ID|WN22-AC-000090, Vuln-ID|V-254293

Plugin: Windows

Control ID: ce33afee6240f9b500f1eb4f8e6db046e2c1b3e73d36ad7deafb0372af06ff75