1.1.3.5.5 Set 'Domain member: Digitally encrypt or sign secure channel data (always)' to 'Enabled'

Information

This policy setting determines whether all secure channel traffic that is initiated by the domain member
must be signed or encrypted.

Solution

Make sure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to enabled.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-13, CSCv6|13

Plugin: Windows

Control ID: a958b3582e936e5d9261d10c3f2db8b6b93c0ad66c4c6c7d7b602e0edd037df3