STIGQter: STIG Summary: Microsoft Windows Server 2025 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

Windows Server 2025 OpenSSH must force a frequent session key renegotiation for SSH connections to the server.

DISA Rule

SV-285317r1211179_rule

Vulnerability Number

V-285317

Group Title

SRG-OS-000423-GPOS-00187

Rule Version

WN25-SH-000050

Severity

CAT II

CCI(s)

• CCI-000068 - Implement cryptographic mechanisms to protect the confidentiality of remote access sessions.
• CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.
• CCI-002421 - Implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.

Weight

10

Fix Recommendation

To configure the system, add or modify the following line in the "$env:ProgramData/ssh/sshd_config" file.

An example configuration line is:

RekeyLimit 1G 1h

Restart the OpenSSH service for the settings to take effect.

Check Contents

If OpenSSH is not installed on the system, this requirement is NA.
Verify the OpenSSH server is configured to force frequent session key renegotiation with the following command:

C:\ > Get-Content "$env:ProgramData\ssh\sshd_config" | Select-String -Pattern '^\s*RekeyLimit'

RekeyLimit 1G 1h

If "RekeyLimit" does not have a maximum data amount and maximum time defined, is missing, or is commented out, this is a finding.

Vulnerability Number

V-285317

Documentable

False

Rule Version

WN25-SH-000050

Severity Override Guidance

If OpenSSH is not installed on the system, this requirement is NA.
Verify the OpenSSH server is configured to force frequent session key renegotiation with the following command:

C:\ > Get-Content "$env:ProgramData\ssh\sshd_config" | Select-String -Pattern '^\s*RekeyLimit'

RekeyLimit 1G 1h

If "RekeyLimit" does not have a maximum data amount and maximum time defined, is missing, or is commented out, this is a finding.

Check Content Reference

M

Target Key

5719