Security Technical Implementation Guides (STIGs)

Vulnerability ID	Severity	Description
V-224991	Medium	Domain controllers must have a PKI server certificate
V-224992	High	Domain Controller PKI certificates must be issued by the DoD PKI or an approved External Certific...
V-224993	High	PKI certificates associated with user accounts must be issued by the DoD PKI or an approved Exter...
V-253427	Medium	The DoD Root CA certificates must be installed in the Trusted Root Store
V-278159	Medium	Windows Server 2025 domain controllers must have a PKI server certificate
V-278160	High	Windows Server 2025 domain Controller PKI certificates must be issued by the DOD PKI or an approv...
V-278161	High	Windows Server 2025 PKI certificates associated with user accounts must be issued by a DOD PKI or...
V-278192	Medium	Windows Server 2025 must have the DOD Root Certificate Authority (CA) certificates installed in t...
V-278193	Medium	Windows Server 2025 must have the DOD Interoperability Root Certificate Authority (CA) cross-cert...
V-278194	Medium	Windows Server 2025 must have the US DOD CCEB Interoperability Root CA cross-certificates in the ...
V-277078	Medium	The macOS system must set smart card certificate trust to moderate