STIGQter: STIG Summary: Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 30 Jan 2025:

SchUseStrongCrypto must be enabled.

DISA Rule

SV-259577r960759_rule

Vulnerability Number

V-259577

Group Title

SRG-APP-000014

Rule Version

EX19-ED-000006

Severity

CAT II

CCI(s)

• CCI-000068 - Implement cryptographic mechanisms to protect the confidentiality of remote access sessions.

Weight

10

Fix Recommendation

In a PowerShell window with elevated privileges, run the following commands:

reg add HKLM\SOFTWARE\Microsoft\.NetFramework\v4.0.30319 /v "SchUseStrongCrypto" /t REG_DWORD /d 1

reg add HKLM\SOFTWARE\WoW6432Node\Microsoft\.NetFramework\v4.0.30319 /v "SchUseStrongCrypto" /t REG_DWORD /d 1

This will create the value within the necessary key and set the data to 1.

Check Contents

In a PowerShell window, run the following commands:

Get-ItemProperty HKLM:\SOFTWARE\Microsoft\.NetFramework\v4.0.30319

If the value "SchUseStrongCrypto" is not present and set to 1, this is a finding.

Vulnerability Number

V-259577

Documentable

False

Rule Version

EX19-ED-000006

Severity Override Guidance

In a PowerShell window, run the following commands:

Get-ItemProperty HKLM:\SOFTWARE\Microsoft\.NetFramework\v4.0.30319

If the value "SchUseStrongCrypto" is not present and set to 1, this is a finding.

Check Content Reference

M

Target Key

5579