Detections
Analytics

WN25-SH-000090 - Windows Server 2025 OpenSSH private host key files must conform to minimum requirements.

Information

If an unauthorized user obtains the private SSH host key file, the host could be impersonated.

Solution

Maintain the permissions of the private host key files as follows:

BUILTIN\Administrators:(F)
NT AUTHORITY\SYSTEM:(F)

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-285321r1211191_rule, STIG-ID|WN25-SH-000090, Vuln-ID|V-285321

Plugin: Windows

Control ID: bf89f00e3287f608cc1bee14fa1dc333da86666e8d845ba1d52e949be0cee525