UCF STIG Viewer Logo

Reversible password encryption is not disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-2372 3.057 SV-2372r1_rule IAIA-1 IAIA-2 Medium
Description
Storing passwords using reversible encryption is essentially the same as storing clear-text versions of the passwords. For this reason, this policy should never be enabled.
STIG Date
Win2k3 Audit 2013-06-10

Details

Check Text ( None )
None
Fix Text (F-115r1_fix)
Configure the system to prevent passwords from being saved using reverse encryption.