Replace Self-Signed Certificates

Mô tả

Print devices often utilize self-signed certificates to protect the communication between administrators and management interfaces. This is most commonly found when managing the device via an HTTPS interface. It is recommended that self-signed certificates be replaced by certificates that chain to a trusted certificate authority. Self-signed certificates are less effective at ensuring that the communication between the administrator and the management interface is not victim to a man in the middle attack. This is because the identity of the certificate holder is not attested to by a trusted third party. Given this, it is more feasible for a malicious entity to compromise administrative communication by generating his/her own self-signed certificate and presenting that certificate to the administrator’s HTTPS client on behalf of the MFD. 7.2 File Shares

Thuộc tính

Hệ điều hành

Bất kỳ

Thẻ

mfdprinter

Tham chiếu

CIS Multi-Function Device Benchmark v1.0.0 - 7.1.1 Replace Self-Signed Certificates