Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
SC-17 PUBLIC KEY INFRASTRUCTURE CERTIFICATES
Overview
| Number | Title | Impact | Priority | Subject Area |
|---|---|---|---|---|
| SC-17 | Public Key Infrastructure Certificates | MODERATE | P1 | System And Communications Protection |
| Instructions |
|---|
| The organization issues public key certificates under an Assignment: organization-defined certificate policy or obtains public key certificates from an approved service provider. |
| Guidance |
|---|
| For all certificates, organizations manage information system trust stores to ensure only approved trust anchors are in the trust stores. This control addresses both certificates with visibility external to organizational information systems and certificates related to the internal operations of systems, for example, application-specific time services. |
| Enhancements |
|---|