Home
Security Hardening
CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2 Bitlocker

CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2 Bitlocker

(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Key’ is set to ‘Enabled: Allow 256-bit recovery key’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Password’ is set to ‘Enabled: Allow 48-digit recovery password’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:’ is set to ‘Enabled: Store recovery passwords and key packages’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives’ is set to ‘Enabled: False’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: False’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Key’ is set to ‘Enabled: Do not allow 256-bit recovery key’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...

Prev Next

CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2 Bitlocker

(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard’ is set to ‘Enabled: True’

(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Key’ is set to ‘Enabled: Allow 256-bit recovery key’

(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Password’ is set to ‘Enabled: Allow 48-digit recovery password’

(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:’ is set to ‘Enabled: Store recovery passwords and key packages’

(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives’ is set to ‘Enabled: True’

(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered’ is set to ‘Enabled’

(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard’ is set to ‘Enabled: True’

(BL) Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives’ is set to ‘Enabled: False’

(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: False’

(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Key’ is set to ‘Enabled: Do not allow 256-bit recovery key’