STIGQter STIGQter: STIG Summary: Microsoft Windows Server 2022 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Windows Server 2022 must have software certificate installation files removed.

DISA Rule

SV-254261r1210262_rule

Vulnerability Number

V-254261

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

WN22-00-000240

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Remove any certificate installation files (*.p12 and *.pfx) found on a system.

Note: This does not apply to server-based applications that have a requirement for .p12 or .pfx certificate files.

Check Contents

Search all drives for *.p12 and *.pfx files.

If any files with these extensions exist, this is a finding.

This does not apply to server-based applications that have a requirement for .p12 or .pfx certificate files. Some applications create files with extensions of .p12 or .pfx that are not certificate installation files. Removal of noncertificate installation files from systems is not required. These must be documented with the information system security officer (ISSO).

Vulnerability Number

V-254261

Documentable

False

Rule Version

WN22-00-000240

Severity Override Guidance

Search all drives for *.p12 and *.pfx files.

If any files with these extensions exist, this is a finding.

This does not apply to server-based applications that have a requirement for .p12 or .pfx certificate files. Some applications create files with extensions of .p12 or .pfx that are not certificate installation files. Removal of noncertificate installation files from systems is not required. These must be documented with the information system security officer (ISSO).

Check Content Reference

M

Target Key

5485