Ensure Active Directory accounts are configured to require TLS

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

From the CLI: ; Run the command puread account list to display information about Active Directory account attributes. ; Review the output and verify that the TLS column for the configured AD account is set to required (rather than optional).

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

To align with the security recommendations, update your Active Directory account configuration to explicitly require TLS for all domain controller communications. From the GUI: ; Navigate to Settings > Access > Users and Policies or Storage > Servers depending on where the AD account is applied. ; Edit the Active Directory configuration (e.g., in the Configure Remote Directory Service window). ; Under the TLS Mode setting, select the required radio button to force TLS communication with the domain controller. ; Click Create (or Save) to apply the configuration. From the CLI: ; Update the Active Directory account to require TLS using the puread account setattr command.