| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1650 - Public Key Infrastructure Certificates | ||
| Id | 201d3740-bd16-4baf-b4b8-7cda352228b7 | ||
| Version | 1.0.0 Details on versioning |
||
| Versioning |
Versions supported for Versioning: 0 Built-in Versioning [Preview] |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this System and Communications Protection control | ||
| Additional metadata |
Name/Id: ACF1650 / Microsoft Managed Control 1650 Category: System and Communications Protection Title: Public Key Infrastructure Certificates Ownership: Customer, Microsoft Description: The organization issues public key certificates under an Public Key Infrastructure Operational Security Standard or obtains public key certificates from an approved service provider. Requirements: The Online Services Key Management Standard applies to the operation of all Microsoft’s online services’ systems residing within the Azure environment utilizing cryptographic mechanisms for securing data or systems. This standard applies to all environments managed by Azure, including labs, production, and preproduction. Microsoft’s corporate Public Key Infrastructure (PKI) has been established to provide a variety of digital certificate services to support operations for Azure and for the Microsoft Corporation. Microsoft corporate PKI functions as the Certificate Authority (CA) and Registration Authority (RA) and provides directory services to manage keys and certificates. Internal Azure traffic does not require the use of digital certificates and also includes the use of self-signed certificates. The use of self-signed certificates applies exclusively to internal use within Azure. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|