{"id":19506,"date":"2023-07-20T15:17:23","date_gmt":"2023-07-20T19:17:23","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=19506"},"modified":"2023-07-20T15:17:23","modified_gmt":"2023-07-20T19:17:23","slug":"v-237434-scom-web-console-ssl-settings","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/","title":{"rendered":"V-237434 SCOM Web Console SSL Settings"},"content":{"rendered":"
\"No<\/a>
No Soup for you! You have STIG findings \ud83d\ude41<\/figcaption><\/figure>\n

 <\/p>\n

Much like the character from Seinfeld, finding out that the ‘V-237434 SCOM Web Console SSL Settings’ is NOT STIG Compliant (STIG’d), is just as tramatic as being hungry, and told ‘No soup for you!”\u00a0 With all the many STIG findings, here’s a quick and dirty way to resolve the finding.<\/p>\n

 <\/p>\n

 <\/p>\n

Vendor documentation<\/strong><\/p>\n

STIG V-237434<\/a><\/p>\n

SCOM Web Console Authentication on learn.microsoft.com<\/a><\/p>\n

Kevin Holman SCOM QuickStart guides for SCOM 2019<\/a>, SCOM 2022<\/a><\/p>\n

 <\/p>\n

V-237434 SCOM Web Console SSL Settings<\/strong><\/h2>\n

STIG V-237434 requires trusted CA SSL certificates.\u00a0 Previous July blog posts<\/a> are related to the effort to secure the SCOM web console.\u00a0 The redirect post<\/a> forces HTTPS, complimenting this STIG finding.\u00a0 As the STIG states, remediation verification that IIS web site binding is HTTPS, and remove HTTP.<\/p>\n

 <\/p>\n

Remediate SCOM servers with Web Console role<\/strong><\/h2>\n

Assumption = SmartCards are used for authentication, this part is applicable, otherwise skip.<\/strong><\/p>\n

RDP to server, connect to IISManager<\/p>\n

Expand IIS Server > Expand Sites > Expand Default Web Site<\/p>\n

\"IIS<\/a>
IIS Manager Default Web Site menu<\/figcaption><\/figure>\n

 <\/p>\n

Click on SSL Settings<\/p>\n

If the menu is greyed out, follow the SCOM WebConsole settings blog<\/a> to setup the SSL certificate.\u00a0 Once complete, proceed below.<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

Click on SSL Settings > Check box to ‘Require SSL’<\/p>\n

If menu is NOT greyed out, click radio button to ‘Accept’ client certificates<\/p>\n

Click Apply<\/p>\n

\"IIS<\/a>
IIS Manager, Default Web Site, SSL Settings default when NOT running SSL certificate and bindings<\/figcaption><\/figure>\n

 <\/p>\n

Click on Default Website on left hand pane<\/p>\n

In the Actions Pane (right hand side), click on Restart to restart the IIS website<\/p>\n

\"Restart<\/a>
Restart IIS website from IIS manager actions pane<\/figcaption><\/figure>\n

 <\/p>\n

 <\/p>\n

IIS Website bindings<\/strong><\/h2>\n

Next pieces is to verify the SSL HTTPS binding is setup correctly.\u00a0 In case you got disconnected, or rebooted the server<\/p>\n

RDP to server, connect to IISManager<\/p>\n

Expand IIS Server > Expand Sites > Expand Default Web Site<\/p>\n

In the Actions pane on the top right, click on Bindings<\/p>\n

\"IISManager,<\/a>
IISManager, Default Web Site, Actions Pane, Bindings to setup HTTPS and remove HTTPS<\/figcaption><\/figure>\n

 <\/p>\n

Kevin Holman’s QuickStart blog(s) for SCOM 2019, SCOM2022 setup default HTTP binding (i.e. NO SSL cert configured)<\/p>\n

\"Default<\/a>
Default website, Bindings selection showing HTTP if following SCOM quick start<\/figcaption><\/figure>\n

 <\/p>\n

If HTTP ONLY, click the Add button<\/p>\n

Change dropdown for Type to https<\/p>\n

Enter Host Name<\/p>\n

Click Select to choose the SSL cert<\/p>\n

Click OK<\/p>\n

\"Adding<\/a>
Adding HTTPS Binding with server name, SSL cert drop down and selected<\/figcaption><\/figure>\n

 <\/p>\n

Verify SSL certificate added<\/p>\n

\"IIS<\/a>
IIS HTTPS Bindings with SSL cert<\/figcaption><\/figure>\n

 <\/p>\n

If you have the binding above, change your STIG CKL finding and document as NOT a finding, for V-237434 SCOM Web Console SSL Settings!<\/p>\n

Have fun<\/p>\n","protected":false},"excerpt":{"rendered":"

  Much like the character from Seinfeld, finding out that the ‘V-237434 SCOM Web Console SSL Settings’ is NOT STIG Compliant (STIG’d), is just as tramatic as being hungry, and told ‘No soup for you!”\u00a0 With all the many STIG findings, here’s a quick and dirty way to resolve the finding.     Vendor documentation … Continue reading “V-237434 SCOM Web Console SSL Settings”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,5,530,502],"tags":[653,652,611,651,342,497,560,630,650,648,647,649],"class_list":["post-19506","post","type-post","status-publish","format-standard","hentry","category-administration","category-best-practice","category-scom","category-security","tag-binding","tag-https","tag-iis","tag-iis-binding","tag-scom","tag-scom-2019","tag-scom2022","tag-ssl","tag-ssl-setting","tag-stig","tag-stig-v-237434","tag-v-237434"],"yoast_head":"\nV-237434 SCOM Web Console SSL Settings - Kevin Justin's Blog<\/title>\n<meta name=\"description\" content=\"Resolve STIG finding V-237434 on your management servers with the SCOM Web Console SSL Settings and bindings.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"V-237434 SCOM Web Console SSL Settings - Kevin Justin's Blog\" \/>\n<meta property=\"og:description\" content=\"Resolve STIG finding V-237434 on your management servers with the SCOM Web Console SSL Settings and bindings.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-20T19:17:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/NoSoupForYou.jpg\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"V-237434 SCOM Web Console SSL Settings\",\"datePublished\":\"2023-07-20T19:17:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/\"},\"wordCount\":516,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/NoSoupForYou.jpg\",\"keywords\":[\"binding\",\"HTTPS\",\"IIS\",\"IIS binding\",\"SCOM\",\"scom 2019\",\"SCOM2022\",\"SSL\",\"SSL setting\",\"STIG\",\"STIG V-237434\",\"V-237434\"],\"articleSection\":[\"Administration\",\"Best Practice\",\"SCOM\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/\",\"name\":\"V-237434 SCOM Web Console SSL Settings - Kevin Justin's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/NoSoupForYou.jpg\",\"datePublished\":\"2023-07-20T19:17:23+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"Resolve STIG finding V-237434 on your management servers with the SCOM Web Console SSL Settings and bindings.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/NoSoupForYou.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/NoSoupForYou.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/v-237434-scom-web-console-ssl-settings\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"V-237434 SCOM Web Console SSL Settings\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin's Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"V-237434 SCOM Web Console SSL Settings - Kevin Justin's Blog","description":"Resolve STIG finding V-237434 on your management servers with the SCOM Web Console SSL Settings and bindings.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/","og_locale":"en_US","og_type":"article","og_title":"V-237434 SCOM Web Console SSL Settings - Kevin Justin's Blog","og_description":"Resolve STIG finding V-237434 on your management servers with the SCOM Web Console SSL Settings and bindings.","og_url":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/","og_site_name":"Kevin Justin's Blog","article_published_time":"2023-07-20T19:17:23+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/NoSoupForYou.jpg","type":"","width":"","height":""}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"V-237434 SCOM Web Console SSL Settings","datePublished":"2023-07-20T19:17:23+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/"},"wordCount":516,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/NoSoupForYou.jpg","keywords":["binding","HTTPS","IIS","IIS binding","SCOM","scom 2019","SCOM2022","SSL","SSL setting","STIG","STIG V-237434","V-237434"],"articleSection":["Administration","Best Practice","SCOM","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/","url":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/","name":"V-237434 SCOM Web Console SSL Settings - Kevin Justin's Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/NoSoupForYou.jpg","datePublished":"2023-07-20T19:17:23+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"Resolve STIG finding V-237434 on your management servers with the SCOM Web Console SSL Settings and bindings.","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/NoSoupForYou.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/NoSoupForYou.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/v-237434-scom-web-console-ssl-settings\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"V-237434 SCOM Web Console SSL Settings"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin's Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=19506"}],"version-history":[{"count":8,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19506\/revisions"}],"predecessor-version":[{"id":19524,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19506\/revisions\/19524"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=19506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=19506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=19506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}