Detections
Analytics
WN25-00-000240 - Windows Server 2025 must have software certificate installation files removed.
Information
Use of software certificates and their accompanying installation files for end users to access resources is less secure than the use of hardware-based certificates.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Remove any certificate installation files (*.p12 and *.pfx) found on a system.Note: This does not apply to server-based applications that have a requirement for .p12 or .pfx certificate files.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R3_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-278008r1211146_rule, STIG-ID|WN25-00-000240, Vuln-ID|V-278008
Plugin: Windows
Control ID: e02f4dc1c6043311d2f6320151a063cc1c3e99ebec7c076c74dc86d3bf548fd5