Ensure ‘Choose how BitLocker-protected fixed drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...
- Home
- Security Hardening
- CIS Microsoft Windows 10 Enterprise Release 1709 V1.4.0 Bitlocker
CIS Microsoft Windows 10 Enterprise Release 1709 V1.4.0 Bitlocker
Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Key’ is set to ‘Enabled: Allow 256-bit’
Details 18.9.11.1.5 Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Key’ is set to ‘Enabled: Allow 256-bit recovery...Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Password’ is set to ‘Enabled: Allow 48-digit’
Details 18.9.11.1.4 Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Password’ is set to ‘Enabled: Allow 48-digit recovery...Ensure ‘Choose how BitLocker-protected operating system drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...Ensure ‘Choose how BitLocker-protected OS drives can be recovered: Recovery Key’ is set to ‘Enabled: Do not allow 256-bit’
Details 18.9.11.2.6 Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Key’ is set to ‘Enabled: Do not...Ensure ‘Choose how BitLocker-protected removable drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...Ensure ‘Choose how BL-protected OS drives can be recovered: Recovery Password’ is set to ‘Enabled: Require 48-digit’
Details 18.9.11.2.5 Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Password’ is set to ‘Enabled: Require 48-digit...Ensure ‘Choose how fixed drives can be recovered: Omit recovery options from the BL setup wizard’ is set to ‘Enabled: True’
Details 18.9.11.1.6 Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard’ is...Ensure ‘Configure minimum PIN length for startup’ is set to ‘Enabled: 7 or more characters’
Details This policy setting allows you to configure a minimum length for a Trusted Platform Module (TPM) startup PIN. This...Ensure ‘Configure storage of BL recovery info to AD DS’ is set to ‘Enabled: Backup recovery passwords and key packages’
Details 18.9.11.1.8 Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS’...