Title

The IE warning of invalid certificates parameter is not set correctly (Cat II impact)

Discussion

This parameter warns users if the certifcate being presented by the web site is invalid. Since server certificates are used to validate the identity of the web server it is critical to warn the user of a potential issue with the certificate being presented by the web server.

Check Content

Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value WarnonBadCertRecving value is 1, this is not a finding.

Fix Text

Change the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings to the value WarnonBadCertRecving to 1

Additional Identifiers

Rule ID: SV-6289r2_rule

Vulnerability ID: V-6239

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.