← Back to Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide

V-228355

CAT II (Medium)

Exchange servers must use approved DoW certificates.

Rule ID

SV-228355r1269497_rule

STIG

Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide

Version

V2R7

CCIs

CCI-000213

Discussion

Server certificates are required for many security features in Exchange; without them, the server cannot engage in many forms of secure communication. Failure to implement valid certificates makes it virtually impossible to secure Exchange's communications.

Check Content

Open the Exchange Management Shell and enter the following command:

Get-ExchangeCertificate | Select CertificateDomains, issuer

If the value of "CertificateDomains" does not indicate it is issued by the DoW, this is a finding.

Fix Text

Remove the non-DoW certificate and import the correct DoW certificates.