[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Network Security: Allow PKU2U authentication requests to this computer to use online identities

ID: oval:org.secpod.oval:def:8796Date: (C)2013-01-21   (M)2023-05-09
Class: COMPLIANCEFamily: windows




The Network Security: Allow PKU2U authentication requests to this computer to use online identities setting should be configured correctly. Windows 7 and Windows Server 2008 R2 introduce an extension to the Negotiate authentication package, Spnego.dll. In previous versions of Windows, Negotiate decides whether to use Kerberos or NTLM for authentication. The extension SSP for Negotiate, Negoexts, which is treated as an authentication protocol by Windows, supports Microsoft SSPs including PKU2U. You can also develop or add other SSPs. When computers are configured to accept authentication requests by using online IDs, Negoexts.dll calls the PKU2U SSP on the computer that is used to log on. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer computers. When validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation and associates the users certificate to a security token and the logon process completes. This policy will be turned off by default on domain joined machines. This would disallow the online identities to be able to authenticate to the domain joined machine in Windows 7. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network Security: Allow PKU2U authentication requests to this computer to use online identities (2) KEY: HKLM\System\CurrentControlSet\Control\Lsa\pku2u\AllowOnlineID

Platform:
Microsoft Windows Server 2008 R2
Reference:
CCE-10839-9
CPE    1
cpe:/o:microsoft:windows_server_2008:r2
CCE    1
CCE-10839-9
XCCDF    3
xccdf_org.secpod_benchmark_HIPAA_45CFR_164_Windows_Server_2008_R2
xccdf_org.secpod_benchmark_general_Windows_Server_2008_R2
xccdf_org.secpod_benchmark_PCI_3_2_Windows_Server_2008_R2

© SecPod Technologies