Parameter missing in the Security Essentials Windows 2025 standard for check '18.4.5 Ensure 'Enable Certificate Padding' is set to 'Enabled''

Products

• Control Compliance Suite Standards Server
• Control Compliance Suite
• Control Compliance Suite Standards Database
• Control Compliance Suite Standards Module

Issue/Introduction

The check '18.4.5 Ensure 'Enable Certificate Padding' is set to 'Enabled' in the 'Security Essentials for Microsoft Windows Server 2025' standard fails with a message
18.4.5 Ensure 'Enable Certificate Padding' is set to 'Enabled' "Object Name: [No data available]

Environment

CCS 12.6.x

CCS 12.7

Resolution

The Security Essentials for Microsoft Windows Server 2025 standard is based off of the CIS Benchmark for the Windows Server 2025, and as per the PDF 'CIS Microsoft Windows Server 2025 Benchmark v1.0.0' this check should also include the either the REG_DWORD or REG_SZ be set to the value of 1.  The Security Essentials for Microsoft Windows Server 2025 standard is only looking for the REG_DWORD parameter.  You can copy and customize the check and add the REG_SZ parameter for the check to pass.

Development is looking into updating the check in a future release of the standard to match the recommendations of the CIS Benchmark.