STIGQter: STIG Summary: General Purpose Operating System Security Requirements Guide Version: 3 Release: 3 Benchmark Date: 28 Oct 2025:

The operating system must include only approved trust anchors in trust stores or certificate stores managed by the organization.

DISA Rule

SV-263659r982563_rule

Vulnerability Number

V-263659

Group Title

SRG-OS-000775

Rule Version

SRG-OS-000775-GPOS-00230

Severity

CAT II

CCI(s)

• CCI-004909 - Include only approved trust anchors in trust stores or certificate stores managed by the organization.

Weight

10

Fix Recommendation

Configure the operating system to include only approved trust anchors in trust stores or certificate stores managed by the organization.

Check Contents

Verify the operating system is configured to include only approved trust anchors in trust stores or certificate stores managed by the organization.

If the operating system is not configured to include only approved trust anchors in trust stores or certificate stores managed by the organization, this is a finding.

Vulnerability Number

V-263659

Documentable

False

Rule Version

SRG-OS-000775-GPOS-00230

Severity Override Guidance

Verify the operating system is configured to include only approved trust anchors in trust stores or certificate stores managed by the organization.

If the operating system is not configured to include only approved trust anchors in trust stores or certificate stores managed by the organization, this is a finding.

Check Content Reference

M

Target Key

2895