Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-63721 | WN10-CC-000260 | SV-78211r1_rule | Medium |
Description |
---|
Microsoft Passport for Work allows the use of PINs as well as biometrics for authentication without the sending a password to a network or website where it could be compromised. Longer minimum PIN lengths increase the available combinations an attacker would have to attempt. Shorter minimum length significantly reduces the strength. |
STIG | Date |
---|---|
Windows 10 Security Technical Implementation Guide | 2016-01-07 |
Check Text ( None ) |
---|
None |
Fix Text (F-69649r1_fix) |
---|
Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Microsoft Passport for Work >> PIN Complexity >> "Minimum PIN length" to "6" or greater. |