Detections
Analytics

1.55 WN22-AC-000090

Information

Windows Server 2022 reversible password encryption must be disabled.

GROUP ID: V-254293
RULE ID: SV-254293r1051095

Storing passwords using reversible encryption is essentially the same as storing clear-text versions of the passwords, which are easily compromised. For this reason, this policy must never be enabled.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy >> Store passwords using reversible encryption to 'Disabled'

.

See Also

https://workbench.cisecurity.org/benchmarks/28297

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CCI|CCI-000196, CCI|CCI-004062, Rule-ID|SV-254293r1051095_rule, STIG-ID|WN22-AC-000090, Vuln-ID|V-254293

Plugin: Windows

Control ID: 9bc21a18705a7b2f20d19807790737f23f232e97d7e137a029edd2e6b0b3d711