Merge pull request #1301 from microsoft/erjenkin#1276

Update PowerSTIG to Parse/Apply U_MS_Windows_Server_2019_V2R8_STIG

CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ## [Unreleased]
 
+* Update PowerSTIG to Parse/Apply U_MS_Windows_Server_2019_V2R8_STIG [#1276](https://github.com/microsoft/PowerStig/issues/1276)
 * Update PowerSTIG to Parse/Apply U_MS_Windows_Server_2022_V1R4_STIG: [#1277](https://github.com/microsoft/PowerStig/issues/1277)
 * Update PowerSTIG to Parse/Apply U_MS_Windows_Server_2016_V2R7_STIG [#1275](https://github.com/microsoft/PowerStig/issues/1275)
 * Update PowerSTIG to Parse/Apply U_RHEL_7_V3R13_STIG: [#1283](https://github.com/microsoft/PowerStig/issues/1283)

source/StigData/Archive/Windows.Server.2019/U_MS_Windows_Server_2019_DC_STIG_V2R6_Manual-xccdf.log → source/StigData/Archive/Windows.Server.2019/U_MS_Windows_Server_2019_DC_STIG_V2R8_Manual-xccdf.log

@@ -26,3 +26,4 @@ V-205717::0x00000002 (2) (Prompt for consent on the secure desktop)::1 or 2
 V-205830::0x00000000 (0) (or if the Value Name does not exist)::0
 V-214936::*::HardCodedRule(ServiceRule)@{DscResource = 'Service'; Ensure = 'Present'; ServiceName = $null; ServiceState = 'Running'; StartupType = $null; OrganizationValueTestString = 'ServiceName/StartupType is populated with correct Firewall service information'}
 V-205632::*::HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System'; ValueName = 'LegalNoticeCaption'; ValueType = 'String'; ValueData = $null; OrganizationValueTestString = "'{0}' -match '^(DoD Notice and Consent Banner|US Department of Defense Warning Statement)$'"}
+V-205648::Thumbprint: D37ECF61C0B4ED88681EF3630C4E2FC787B37AEFB::Thumbprint: D37ECF61C0B4ED88681EF3630C4E2FC787B37AEF

source/StigData/Archive/Windows.Server.2019/U_MS_Windows_Server_2019_MS_STIG_V2R6_Manual-xccdf.log → source/StigData/Archive/Windows.Server.2019/U_MS_Windows_Server_2019_MS_STIG_V2R8_Manual-xccdf.log

@@ -14,3 +14,4 @@ V-205717::0x00000002 (2) (Prompt for consent on the secure desktop)::1 or 2
 V-205830::0x00000000 (0) (or if the Value Name does not exist)::0
 V-214936::*::HardCodedRule(ServiceRule)@{DscResource = 'Service'; Ensure = 'Present'; ServiceName = $null; ServiceState = 'Running'; StartupType = $null; OrganizationValueTestString = 'ServiceName/StartupType is populated with correct Firewall service information'}
 V-205632::*::HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System'; ValueName = 'LegalNoticeCaption'; ValueType = 'String'; ValueData = $null; OrganizationValueTestString = "'{0}' -match '^(DoD Notice and Consent Banner|US Department of Defense Warning Statement)$'"}
+V-205648::Thumbprint: D37ECF61C0B4ED88681EF3630C4E2FC787B37AEFB::Thumbprint: D37ECF61C0B4ED88681EF3630C4E2FC787B37AEF

source/StigData/Processed/WindowsServer-2019-DC-2.6.org.default.xml → source/StigData/Processed/WindowsServer-2019-DC-2.8.org.default.xml

@@ -5,7 +5,7 @@
     Each setting in this file is linked by STIG ID and the valid range is in an
     associated comment.
 -->
-<OrganizationalSettings fullversion="2.6">
+<OrganizationalSettings fullversion="2.8">
   <!-- Ensure 'V-205631' is set to the required legal notice before logon-->
   <OrganizationalSetting id="V-205631" ValueData="You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
 
@@ -30,6 +30,8 @@ By using this IS (which includes any device attached to this IS), you consent to
   <OrganizationalSetting id="V-205648.b" Location="" />
   <!-- Ensure location for DoD Root CA 5 certificate is present-->
   <OrganizationalSetting id="V-205648.c" Location="" />
+  <!-- Ensure location for DoD Root CA 6 certificate is present-->
+  <OrganizationalSetting id="V-205648.d" Location="" />
   <!-- Ensure location for DoD Interoperability Root CA 2 certificate is present-->
   <OrganizationalSetting id="V-205649" Location="" />
   <!-- Ensure location for US DoD CCEB Interoperability Root CA 2 certificate is present-->

source/StigData/Processed/WindowsServer-2019-MS-2.6.org.default.xml → source/StigData/Processed/WindowsServer-2019-MS-2.8.org.default.xml

@@ -5,7 +5,7 @@
     Each setting in this file is linked by STIG ID and the valid range is in an
     associated comment.
 -->
-<OrganizationalSettings fullversion="2.6">
+<OrganizationalSettings fullversion="2.8">
   <!-- Ensure 'V-205631' is set to the required legal notice before logon-->
   <OrganizationalSetting id="V-205631" ValueData="You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
 
@@ -30,6 +30,8 @@ By using this IS (which includes any device attached to this IS), you consent to
   <OrganizationalSetting id="V-205648.b" Location="" />
   <!-- Ensure location for DoD Root CA 5 certificate is present-->
   <OrganizationalSetting id="V-205648.c" Location="" />
+  <!-- Ensure location for DoD Root CA 6 certificate is present-->
+  <OrganizationalSetting id="V-205648.d" Location="" />
   <!-- Ensure location for DoD Interoperability Root CA 2 certificate is present-->
   <OrganizationalSetting id="V-205649" Location="" />
   <!-- Ensure location for US DoD CCEB Interoperability Root CA 2 certificate is present-->