Windows Server 2022 Windows Remote Management (WinRM) client must not use Digest authentication.
An XCCDF Rule
Description
Digest authentication is not as strong as other options and may be subject to man-in-the-middle attacks. Disallowing Digest authentication will reduce this potential.
- ID
- SV-254380r958510_rule
- Version
- WN22-CC-000490
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Remote Management (WinRM) >> WinRM Client >> Disallow Digest authentication to "Enabled".