Software certificate installation files must be removed from a system.

From Windows 7 Security Technical Implementation Guide

Part of Software Certificate Installation Files

Associated with: CCI-000366

SV-25004r2_rule Software certificate installation files must be removed from a system.

Vulnerability discussion

Use of software certificates and their accompanying installation files for end users to access resources is less secure than the use of hardware-based certificates.

Check content

Search all drives for *.p12 and *.pfx files. If any files with these extensions exist, then this is a finding. This does not apply to server-based applications that have a requirement for .p12 certificate files (e.g., Oracle Wallet Manager). Some applications create files with extensions of .p12 that are NOT certificate installation files. Removal from systems of non-certificate installation files are not required. These should be documented with the ISSO.

Fix text

Remove any certificate installation files found on a system. This does not apply to server-based applications that have a requirement for .p12 certificate files (e.g., Oracle Wallet Manager).

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.