Home
Security Hardening
CIS Windows 7 Workstation BitLocker V3.2.0

CIS Windows 7 Workstation BitLocker V3.2.0

Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Key’ is set to ‘Enabled: Allow 256-bit recovery key’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Password’ is set to ‘Enabled: Allow 48-digit recovery password’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives’ is set to ‘Enabled: False’
Details This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: False’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:’ is set to ‘Enabled: Store recovery passwords and key packages’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected operating system drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Key’ is set to ‘Enabled: Do not allow 256-bit recovery key’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Password’ is set to ‘Enabled: Require 48-digit recovery password’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...

Prev Next

CIS Windows 7 Workstation BitLocker V3.2.0

Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Key’ is set to ‘Enabled: Allow 256-bit recovery key’

Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Recovery Password’ is set to ‘Enabled: Allow 48-digit recovery password’

Ensure ‘Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives’ is set to ‘Enabled: False’

Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: False’

Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives’ is set to ‘Enabled: True’

Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:’ is set to ‘Enabled: Store recovery passwords and key packages’

Ensure ‘Choose how BitLocker-protected operating system drives can be recovered’ is set to ‘Enabled’

Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard’ is set to ‘Enabled: True’

Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Key’ is set to ‘Enabled: Do not allow 256-bit recovery key’

Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Recovery Password’ is set to ‘Enabled: Require 48-digit recovery password’