Title

The IE signature checking parameter is not set correctly. (Cat II impact)

Discussion

This parameter will ensure digital signatures are checked on downloaded programs.

Check Content

Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Internet Explorer\Download Criteria: If the value CheckExeSignatures is yes, this is not a finding.

Fix Text

Change the value of registry key HKCU\Software\Microsoft\Internet Explorer\Download to CheckExeSignatures is yes.

Additional Identifiers

Rule ID: SV-6286r1_rule

Vulnerability ID: V-6236

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.