TMA-MFD-4.1.1
Require Valid and Trusted Signature for all Applications
Description
Many enterprise class MFDs have development platforms that allow corporations to load software packages onto the device. These packages are typically designed to alter user interfaces, perform pre or post job processing such as encryption, or perform network operations. MFDs having this capability may support a configuration that requires all packages contain a valid digital signature of a trusted application developer. Ensuring the integrity and authenticity of applications and software packages installed on the MFD will ensure print job confidentiality, integrity, and availability. Configuring the MFD to require all packages and application contain a valid digital signature of a trusted developer will assist in this assurance.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 4.1.1: Require Valid and Trusted Signature for all Applications.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 4.1.1 to configure: Require Valid and Trusted Signature for all Applications.
Properties
- Operating systems
- Any
- Tags
- mfdprinter
- Reference
- CIS Multi-Function Device Benchmark v1.0.0 - 4.1.1 Require Valid and Trusted Signature for all Applications