STIGQter: STIG Summary: Microsoft Windows Server 2025 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

Windows Server 2025 networked systems must have and implement OpenSSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.

DISA Rule

SV-285313r1211167_rule

Vulnerability Number

V-285313

Group Title

SRG-OS-000423-GPOS-00187

Rule Version

WN25-SH-000010

Severity

CAT II

CCI(s)

• CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.
• CCI-002421 - Implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.
• CCI-002422 - Maintain the confidentiality and/or integrity of information during reception.

Weight

10

Fix Recommendation

To install and start the OpenSSH service, run the following commands:

C:\ > Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0

C:\ > Start-Service sshd

C:\ > Set-Service -Name sshd -StartupType 'Automatic'

Check Contents

If OpenSSH is not installed on the system, this requirement is not applicable.

Verify that "OpenSSH" is installed with the following command:

C:\ > Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH*'

Name : OpenSSH.Client~~~~0.0.1.0
State : Installed

Name : OpenSSH.Server~~~~0.0.1.0
State : Installed

If installed, verify the service is active with the following command:

C:\ > Get-Service sshd

Status Name DisplayName
----- ----- -------------
Running sshd OpenSSH SSH Server

If OpenSSH is installed and the "sshd" service is not "Running", this is a finding.

Vulnerability Number

V-285313

Documentable

False

Rule Version

WN25-SH-000010

Severity Override Guidance

If OpenSSH is not installed on the system, this requirement is not applicable.

Verify that "OpenSSH" is installed with the following command:

C:\ > Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH*'

Name : OpenSSH.Client~~~~0.0.1.0
State : Installed

Name : OpenSSH.Server~~~~0.0.1.0
State : Installed

If installed, verify the service is active with the following command:

C:\ > Get-Service sshd

Status Name DisplayName
----- ----- -------------
Running sshd OpenSSH SSH Server

If OpenSSH is installed and the "sshd" service is not "Running", this is a finding.

Check Content Reference

M

Target Key

5719