Microsoft InfoPath 2010 Security Technical Implementation Guide

The Microsoft InfoPath 2010 Security Technical Implementation Guide (V1 R12) has 25 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

25STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R12

CurrentPublished Wed Jul 24 2024

A form that is digitally signed must be displayed with a warning.

Microsoft InfoPath 2010 Security Technical Implementation Guide

Assessment Title

Rule Text

A form that is digitally signed must be displayed with a warning.

Description

Discussion Text

This setting controls whether the user sees a dialog box when opening Microsoft InfoPath forms containing digitally signed content. By default, InfoPath shows the user a warning message when the form contains a digital signature.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-241908

Rule

SV-241908r960954_rule

Severity

medium

Rule Version

DTOO297 - InfoPath

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

The policy value for User Configuration -> Administrative Templates -> Microsoft InfoPath 2010 -> Security "Display a warning that a form is digitally signed" must be set to "Enabled".

Procedure: Use the Windows Registry Editor to navigate to the following key: 

HKCU\Software\Policies\Microsoft\Office\14.0\infopath\security

Criteria: If the value SignatureWarning is REG_DWORD = 1, this is not a finding.

Implementation Procedure

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft InfoPath 2010 -> Security "Display a warning that a form is digitally signed" to "Enabled".

STIG check 23 of 25 in the Microsoft InfoPath 2010 STIG checklist

← Previous · V-241907Disabling opening forms with managed code from the Internet security zone must be configured.Next · V-241909 →The InfoPath APTCA Assembly Allowable List must be enforced.