The IE warning of invalid certificates parameter is not set correctly
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-6239 | DTBI015 | SV-6289r2_rule | ECSC-1 | Medium |
| Description |
|---|
| This parameter warns users if the certifcate being presented by the web site is invalid. Since server certificates are used to validate the identity of the web server it is critical to warn the user of a potential issue with the certificate being presented by the web server. |
| STIG | Date |
|---|---|
| Microsoft IE Version 6 | 2014-12-17 |
Details
| Check Text ( C-207r3_chk ) |
|---|
| Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value WarnonBadCertRecving value is 1, this is not a finding. |
| Fix Text (F-5686r3_fix) |
|---|
| Change the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings to the value WarnonBadCertRecving to 1 |