UCF STIG Viewer Logo

Servers must use approved DoD certificates.


Finding ID Version Rule ID IA Controls Severity
V-33626 Exch-2-014 SV-44046r2_rule Medium
Server certificates are required for many security features in Exchange; without them the server cannot engage in many forms of secure communication. Failure to implement valid certificates makes it virtually impossible to secure Exchange's communications.
Exchange 2010 Mailbox Server STIG 2017-07-05


Check Text ( C-41733r5_chk )
Open the Exchange Management Shell and enter the following command:

Get-ExchangeCertificate | Select CertificateDomains, issuer

If the value of 'CertificateDomains' does not indicate it is issued by the DoD, this is a finding.
Fix Text (F-37518r1_fix)
Remove the non-DoD certificate and import the correct DoD certificates.