TMA-MFD-4.1.2
Require Application Certificate be signed by a Trusted Authority
Description
Many enterprise class MFDs allow corporations to load software packages onto the device. These packages are typically designed alter user interfaces, perform pre or post job processing such as encryption, or perform network operations. MFDs having this capability may support a configuration that requires all packages contain a certificate that has been signed by a trusted certificate authority (CA), or root. Ensuring that all application certificates are signed by a trusted root will ensure the authenticity of the application’s signature. This will in turn provide additional assurance that the integrity of the application being loaded on to the MFD is intact.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 4.1.2: Require Application Certificate be signed by a Trusted Authority.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 4.1.2 to configure: Require Application Certificate be signed by a Trusted Authority.
Properties
- Operating systems
- Any
- Tags
- authmfdprinter
- Reference
- CIS Multi-Function Device Benchmark v1.0.0 - 4.1.2 Require Application Certificate be signed by a Trusted Authority