STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The Enterprise Voice, Video, and Messaging Session Manager must only allow the use of DOD-approved PKI certificate authorities when using PKI.

DISA Rule

SV-260031r956076_rule

Vulnerability Number

V-260031

Group Title

SRG-NET-000355

Rule Version

SRG-NET-000355-VVSM-00010

Severity

CAT II

CCI(s)

• CCI-002470 - Only allow the use of organization-defined certificate authorities for verification of the establishment of protected sessions.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Session Manager to only use DOD-approved certificate authorities when using PKI.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Session Manager, when using PKI, only uses DOD-approved certificate authorities.

If the Enterprise Voice, Video, and Messaging Session Manager, when using PKI, does not use DOD-approved certificate authorities, this is a finding.

Vulnerability Number

V-260031

Documentable

False

Rule Version

SRG-NET-000355-VVSM-00010

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Session Manager, when using PKI, only uses DOD-approved certificate authorities.

If the Enterprise Voice, Video, and Messaging Session Manager, when using PKI, does not use DOD-approved certificate authorities, this is a finding.

Check Content Reference

M

Target Key

5587