Root Certificates must not be updated automatically from the Microsoft site.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15671	WN08-CC-000031	SV-48222r1_rule	ECSC-1	Low

Description
Root Certificate updates must be controlled in the enterprise to ensure a proper validation chain is maintained. This setting prevents root certificates from being updated automatically from the Microsoft site.

STIG	Date
Windows 8 / 8.1 Security Technical Implementation Guide	2015-03-09

Details

Check Text ( None )
None

Fix Text (F-41358r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Internet Communication Management -> Internet Communication settings -> "Turn off Automatic Root Certificates Update" to "Enabled".