National Institute of Standards and Technology (NIST) - Information technology Laboratory (ITL)

The United States Government Configuration Baseline (USGCB) - Internet Explorer 8 Content

Warning Notice

Do not attempt to implement any of the settings without first testing them in a non-operational environment. These recommendations have only been tested on Windows 7 Ultimate 32-bit, Windows 7 Ultimate 64-bit, Windows 7 Enterprise x86, and Windows 7 Enterprise x64. These settings may be applicable to other Windows systems and service packs; however, NIST has not tested other Windows based systems with these settings. Please see the National Checklist Program (NCP) website for configuration guides related to other Windows Based systems and applications.

The draft download packages contain recommended security settings; they are not meant to replace well-structured policy or sound judgment. Furthermore, these recommendations do not address site-specific configuration issues. Care must be taken when implementing these settings to address local operational and policy concerns.

These recommendations were developed at the National Institute of Standards and Technology, which collaborated with DoD and Microsoft to produce the Windows 7, Windows 7 Firewall, Internet Explorer 8 USGCB. Pursuant to title 17 Section 105 of the United States Code, these recommendations are not subject to copyright protection and are in the public domain. NIST assumes no responsibility whatsoever for their use by other parties, and makes no guarantees, expressed or implied, about their quality, reliability, or any other characteristic. We would appreciate acknowledgement if the recommendations are used.


Download Packages

The following table provides the downloads for the Internet Explorer 8 USGCB Content. VHDs are also available to use for testing. Additional information can be found in the FAQ.

Documentation GPOs SCAP Content CCE to 800-53 Mappings
  • USGCB Major Version 1.2.x.0 Settings
    Please refer to the top-level Microsoft Content Page for the listing of all USGCB settings and associated hash values.
  • USGCB Major Version 1.2.x.0 Known Issues
    Please refer to the top-level Microsoft Content Page for the listing of all known issues relating to USGCB content and associated hash values.
  • USGCB/FDCC Comparison for Internet Explorer - 2010.11.09
    sha1
    6920E757F12E00ED58E39E27FCB2F79B35BBFF8F
    sha256
    7659F2007E3A0286EBCC344885F68540A4B93849628A0603382F28AE74110E18
  • USGCB IE8 GPOs - 2011.11.10
    sha1
    8E791B3DA892EC344C87B24DC102F65C61F9372F
    sha256
    4AA147FA7F943E1D5C4566D8C84435B8553292C411F46C856613387E738CCF50
  • SCAP 1.2 (Oval 5.10)

    Windows IE8 Content - 2012.11.28
    sha1
    AEC024A890EF1ADA72FA786F456255BDA4252488
    sha256
    A0053DF4EC26887ECC7DC973046F42E4A47075ED7816559A5DB75D28B59C3128
  • SCAP 1.0 (Oval 5.4)

    Windows IE8 Content - 2013.04.29
    sha1
    2B534E0D430432294BB8F1B9282D020CA8A5182A
    sha256
    AF6278B4F32EB2B4A6178A38AE11CEEF33AD6D3D1AEF5D05DB37F04AC40CCF1E
  • SCAP 1.0 (Oval 5.3)

    Windows IE8 Content - 2013.04.29
    sha1
    E58AC277A7897BF99DAC136AC1D286850DD15FF4
    sha256
    5442F56D7B6F4EBC6DA08A9047F24715CE7346773FE79978A575B1DA531E002A
  • Windows IE8 SCAP Patch Content - 2013.04.29
    sha1
    326FDC8E9408F1BE118C84DF137CA51E9EE76CA5
    sha256
    8B1DEAE2178765262AFBDB86C075848E287242776E16E4E423A91B438AB49BCF

Update History
Date Documentation GPOs SCAP Content CCE to 800-53 Mappings
April 29, 2013 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
March 21, 2013 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
February 25, 2013 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
January 22, 2013 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
December 28, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
December 05, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
November 28, 2012 No changes No changes SCAP 1.2 (Oval 5.10) content signature updated; no other change to content. No changes
October 31, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
August 17, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
July 30, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
June 15, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. No changes
May 21, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted. SCAP 1.2 (Oval 5.10) content signature updated; no change to content No changes
April 23, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted No changes
March 22, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted No changes
February 23, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted No changes
January 23, 2012 No changes No changes USGCB major version 1.2.x.0 SCAP content posted No changes
November 14, 2011 No changes No changes USGCB major version 1.2.x.0 SCAP content posted No changes
November 10, 2011 No changes USGCB GPOs posted No changes No changes
October 26, 2011 No changes No changes USGCB major version 1.2.x.0 SCAP content posted No changes
October 17, 2011 No changes No changes USGCB major version 1.2.x.0 SCAP content posted No changes
October 04, 2011 No changes No changes No changes National Checklist Program's Machine-readable CCE to 800-53 Mappings linked
September 21, 2011 USGCB major version 1.2.x.0 Settings and Known Issues posted No changes USGCB major version 1.2.x.0 SCAP content posted No changes
August 18, 2011 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
July 27, 2011 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
July 06, 2011 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
April 28, 2011 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
March 18, 2011 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
February 22, 2011 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
February 04, 2011 No changes USGCB major version 1.1.x.0 GPOs posted No changes No changes
January 31, 2011 USGCB major version 1.1.x.0 Settings and Known Issues posted No changes USGCB major version 1.1.x.0 SCAP content posted No changes
January 20, 2011 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
January 07, 2011 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
November 17, 2010 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
November 09, 2010 USGCB/FDCC Comparison for Internet Explorer updated No changes No changes No changes
October 27, 2010 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
October 20, 2010 No changes USGCB GPOs posted No changes No changes
September 30, 2010 No changes No changes USGCB OVAL 5.3 & 5.4 patch content updated No changes
September 24, 2010 USGCB major version 1.0.x.0 Settings Known Issues posted No changes USGCB major version 1.0.x.0 SCAP content posted CCE mapping updates reflected in USGCB Settings spreadsheet
August 31, 2010 USGCB Beta Settings and updated SCAP content issues posted USGCB Beta GPOs posted USGCB Beta SCAP content posted CCE mapping updates reflected in USGCB Beta Settings spreadsheet
August 20, 2010 No changes No changes Alpha USGCB OVAL 5.3 & 5.4 patch content updated No changes
August 09, 2010 No changes No changes Alpha USGCB OVAL 5.3 & 5.4 patch content updated No changes
July 20, 2010 No changes No changes Alpha USGCB OVAL 5.3 & 5.4 patch content updated No changes
June 30, 2010 USGCB/FDCC Comparison for Internet Explorer added No changes No changes No changes
June 16, 2010 No changes No changes Alpha USGCB OVAL 5.3 & 5.4 patch content updated No changes
April 23, 2010 Alpha Content Released Alpha Content Released Alpha Content Released Alpha Content Released