WN25-SH-000100 - Windows Server 2025 OpenSSH public host key files must conform to minimum requirements.

Information

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

Solution

Maintain the permissions of the public host key files as follows:

BUILTIN\Administrators:(F)
NT AUTHORITY\SYSTEM:(F)

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R4_STIG.zip

Item Details

Audit Name: DISA Microsoft Windows Server 2025 STIG v1r4

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-285322r1268251_rule, STIG-ID|WN25-SH-000100, Vuln-ID|V-285322

Plugin: Windows

Control ID: b762707d1bd96baef160417cb5c99a678047ec7019ae70e01d54961243be6e4f