Home
Security Hardening
CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2 Bitlocker

CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2 Bitlocker

(BL) Ensure ‘Configure use of hardware-based encryption for operating system drives: Use BitLocker software-based encryption when hardware encryption is not available’ is set to ‘Enabled: True’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on operating system drives and specify which...
(BL) Ensure ‘Configure use of passwords for fixed data drives’ is set to ‘Disabled’
Details This policy setting specifies whether a password is required to unlock BitLocker-protected fixed data drives. Note: This setting is...
(BL) Ensure ‘Configure use of passwords for operating system drives’ is set to ‘Disabled’
Details This policy setting specifies the constraints for passwords used to unlock BitLocker-protected operating system drives. Note: This setting is...
(BL) Ensure ‘Configure use of hardware-based encryption for operating system drives’ is set to ‘Enabled’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on operating system drives and specify which...
(BL) Ensure ‘Configure use of hardware-based encryption for operating system drives: Restrict crypto algorithms or cipher suites to the following:’ is set to ‘Enabled: 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42’
Details This policy setting allows you to manage BitLocker’s use of hardware-based encryption on operating system drives and specify which...
(BL) Ensure ‘Configure use of smart cards on fixed data drives’ is set to ‘Enabled’
Details This policy setting allows you to specify whether smart cards can be used to authenticate user access to the...
(BL) Ensure ‘Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives’ is set to ‘Enabled: True’
Details This policy setting allows you to specify whether smart cards must be used to authenticate user access to the...
(BL) Ensure ‘Interactive logon: Machine account lockout threshold’ is set to ’10 or fewer invalid logon attempts, but not 0′
Details This security setting determines the number of failed logon attempts that causes the machine to be locked out. Failed...
(BL) Ensure ‘Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.’ is set to ‘True’ (checked)
Details This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for...
(BL) Ensure ‘Prevent installation of devices that match any of these device IDs’ is set to ‘Enabled’
Details This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for...

Prev Next

CIS Microsoft Windows 10 Enterprise Release 1803 V1.5.0 L2 Bitlocker

(BL) Ensure ‘Configure use of hardware-based encryption for operating system drives: Use BitLocker software-based encryption when hardware encryption is not available’ is set to ‘Enabled: True’

(BL) Ensure ‘Configure use of passwords for fixed data drives’ is set to ‘Disabled’

(BL) Ensure ‘Configure use of passwords for operating system drives’ is set to ‘Disabled’

(BL) Ensure ‘Configure use of hardware-based encryption for operating system drives’ is set to ‘Enabled’

(BL) Ensure ‘Configure use of hardware-based encryption for operating system drives: Restrict crypto algorithms or cipher suites to the following:’ is set to ‘Enabled: 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42’

(BL) Ensure ‘Configure use of smart cards on fixed data drives’ is set to ‘Enabled’

(BL) Ensure ‘Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives’ is set to ‘Enabled: True’

(BL) Ensure ‘Interactive logon: Machine account lockout threshold’ is set to ’10 or fewer invalid logon attempts, but not 0′

(BL) Ensure ‘Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.’ is set to ‘True’ (checked)

(BL) Ensure ‘Prevent installation of devices that match any of these device IDs’ is set to ‘Enabled’