UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Software certificate installation files must be removed from Windows 2012/2012 R2.


Overview

Finding ID Version Rule ID IA Controls Severity
V-15823 WN12-GE-000020 SV-53141r4_rule Medium
Description
Use of software certificates and their accompanying installation files for end users to access resources is less secure than the use of hardware-based certificates.
STIG Date
Windows Server 2012/2012 R2 Member Server Security Technical Implementation Guide 2019-09-23

Details

Check Text ( C-94147r1_chk )
Search all drives for *.p12 and *.pfx files.

If any files with these extensions exist, this is a finding.

This does not apply to server-based applications that have a requirement for certificate files or Adobe PreFlight certificate files. Some applications create files with extensions of .p12 that are not certificate installation files. Removal of non-certificate installation files from systems is not required. These must be documented with the ISSO.
Fix Text (F-100997r1_fix)
Remove any certificate installation files (*.p12 and *.pfx) found on a system.

This does not apply to server-based applications that have a requirement for certificate files, Adobe PreFlight certificate files, or non-certificate installation files with the same extension.