Home
  •  

Weak Certificate Hash Signature Algorithm Monitor

Maximus.Connectivity.Monitoring.SSL.WeakSignatureAlgorithm.Monitor (UnitMonitor)

Alerts, when remote server's certificate uses a weak hash algorithm.

Element properties:

TargetMaximus.Connectivity.Monitoring.Test.SSL
Parent MonitorSystem.Health.SecurityState
CategorySecurityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
Monitor TypeMaximus.Connectivity.Monitoring.SSL.WeakSignatureAlgorithm.UnitMonitor
RemotableTrue
AccessibilityPublic
Alert Message
Remote Server Certificate Weak Signature Algorithm
Remote a certificate with weak hash algorithm while connecting to connect to the {0} destination (index: {1}) at the {2}:{3}.

Certificate hash method: {4}
Disabled hash algorithm: {5}
RunAsDefault

Source Code:

<UnitMonitor ID="Maximus.Connectivity.Monitoring.SSL.WeakSignatureAlgorithm.Monitor" Accessibility="Public" Enabled="true" Target="Maximus.Connectivity.Monitoring.Test.SSL" ParentMonitorID="Health!System.Health.SecurityState" Remotable="true" Priority="Normal" TypeID="Maximus.Connectivity.Monitoring.SSL.WeakSignatureAlgorithm.UnitMonitor" ConfirmDelivery="false">

  <Category>SecurityHealth</Category>

  <AlertSettings AlertMessage="Maximus.Connectivity.Monitoring.SSL.WeakSignatureAlgorithm.Monitor.AlertMessage">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Low</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Target/Host/Property[Type="System!System.Entity"]/DisplayName$</AlertParameter1>

      <AlertParameter2>$Target/Host/Property[Type="Maximus.Connectivity.Monitoring.FullyQualifiedDomainName"]/TargetIndex$</AlertParameter2>

      <AlertParameter3>$Target/Host/Property[Type="Maximus.Connectivity.Monitoring.FullyQualifiedDomainName"]/FullyQualifiedDomainName$</AlertParameter3>

      <AlertParameter4>$Data/Context/Property[@Name='RemotePort']$</AlertParameter4>

      <AlertParameter5>$Data/Context/Property[@Name='SignatureAlgorithm']$</AlertParameter5>

      <AlertParameter6>$Target/Property[Type="Maximus.Connectivity.Monitoring.Test.SSL"]/DisabledHash$</AlertParameter6>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="Secure" MonitorTypeStateID="Secure" HealthState="Success"/>

    <OperationalState ID="Insecure" MonitorTypeStateID="Insecure" HealthState="Warning"/>

  </OperationalStates>

  <Configuration/>

</UnitMonitor>