Detections
Analytics
WN22-00-000240 - Windows Server 2022 must have software certificate installation files removed.
Information
Use of software certificates and their accompanying installation files for end users to access resources is less secure than the use of hardware-based certificates.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Remove any certificate installation files (*.p12 and *.pfx) found on a system.Note: This does not apply to server-based applications that have a requirement for .p12 or .pfx certificate files.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2022_V2R10_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2022 STIG v2r10
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-254261r1210262_rule, STIG-ID|WN22-00-000240, Vuln-ID|V-254261
Plugin: Windows
Control ID: 494af7a377696fab1dba331bb94290007739e83b447f468c0f577b8f3a012299