Replace Self-Signed Certificates

Description

Print devices often utilize self-signed certificates to protect the communication between administrators and management interfaces. This is most commonly found when managing the device via an HTTPS interface. It is recommended that self-signed certificates be replaced by certificates that chain to a trusted certificate authority. Self-signed certificates are less effective at ensuring that the communication between the administrator and the management interface is not victim to a man in the middle attack. This is because the identity of the certificate holder is not attested to by a trusted third party. Given this, it is more feasible for a malicious entity to compromise administrative communication by generating his/her own self-signed certificate and presenting that certificate to the administrator’s HTTPS client on behalf of the MFD. 7.2 File Shares

Propriétés

Systèmes d'exploitation

Tous

Étiquettes

mfdprinter

Référence

CIS Multi-Function Device Benchmark v1.0.0 - 7.1.1 Replace Self-Signed Certificates