Home
Security Hardening
CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2 Bitlocker

CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2 Bitlocker

(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Password’ is set to ‘Enabled: Require 48-digit recovery password’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
(BL) Ensure ‘Choose how BitLocker-protected removable drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
(BL) Ensure ‘Configure minimum PIN length for startup’ is set to ‘Enabled: 7 or more characters’
Details This policy setting allows you to configure a minimum length for a Trusted Platform Module (TPM) startup PIN. This...
(BL) Ensure ‘Configure use of hardware-based encryption for fixed data drives’ is set to ‘Enabled’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on fixed data drives and specify which...
(BL) Ensure ‘Configure use of hardware-based encryption for fixed data drives: Restrict crypto algorithms or cipher suites to the following:’ is set to ‘Enabled: 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on fixed data drives and specify which...
(BL) Ensure ‘Configure use of hardware-based encryption for fixed data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption’ is set to ‘Enabled: False’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on fixed data drives and specify which...
(BL) Ensure ‘Configure use of hardware-based encryption for fixed data drives: Use BitLocker software-based encryption when hardware encryption is not available’ is set to ‘Enabled: True’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on fixed data drives and specify which...
(BL) Ensure ‘Configure use of hardware-based encryption for operating system drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption’ is set to ‘Enabled: False’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on operating system drives and specify which...

Prev Next

CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2 Bitlocker

(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Password’ is set to ‘Enabled: Require 48-digit recovery password’

(BL) Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives’ is set to ‘Enabled: True’

(BL) Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: True’

(BL) Ensure ‘Choose how BitLocker-protected removable drives can be recovered’ is set to ‘Enabled’

(BL) Ensure ‘Configure minimum PIN length for startup’ is set to ‘Enabled: 7 or more characters’

(BL) Ensure ‘Configure use of hardware-based encryption for fixed data drives’ is set to ‘Enabled’

(BL) Ensure ‘Configure use of hardware-based encryption for fixed data drives: Restrict crypto algorithms or cipher suites to the following:’ is set to ‘Enabled: 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42’

(BL) Ensure ‘Configure use of hardware-based encryption for fixed data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption’ is set to ‘Enabled: False’

(BL) Ensure ‘Configure use of hardware-based encryption for fixed data drives: Use BitLocker software-based encryption when hardware encryption is not available’ is set to ‘Enabled: True’

(BL) Ensure ‘Configure use of hardware-based encryption for operating system drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption’ is set to ‘Enabled: False’