Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Certificates in the trust store must be issued/signed by an approved CA.
Description
Discussion Text
Use of self-signed certificates creates a lack of integrity and invalidates the certificate based authentication trust model. Certificates used by production systems must be issued/signed by a trusted Root CA and cannot be self-signed. For systems that communicate with industry partners, the DoW ECA program supports the issuance of DoW-approved certificates to industry partners. For information on the DoW ECA program, refer to the DoW PKI office. Links to their site are available on https://public.cyber.mil.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.