Home
Security Hardening
CIS Windows 7 Workstation BitLocker V3.2.0

CIS Windows 7 Workstation BitLocker V3.2.0

Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:’ is set to ‘Enabled: Backup recovery passwords and key packages’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives’ is set to ‘Enabled: False’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected removable drives can be recovered’ is set to ‘Enabled’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard’ is set to ‘Enabled: True’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Recovery Key’ is set to ‘Enabled: Do not allow 256-bit recovery key’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Recovery Password’ is set to ‘Enabled: Do not allow 48-digit recovery password’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives’ is set to ‘Enabled: False’
Details This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the...
Ensure ‘Configure minimum PIN length for startup’ is set to ‘Enabled: 7 or more characters’
Details This policy setting allows you to configure a minimum length for a Trusted Platform Module (TPM) startup PIN. This...

Prev Next

CIS Windows 7 Workstation BitLocker V3.2.0

Ensure ‘Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives’ is set to ‘Enabled: True’

Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent’ is set to ‘Enabled: True’

Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:’ is set to ‘Enabled: Backup recovery passwords and key packages’

Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives’ is set to ‘Enabled: False’

Ensure ‘Choose how BitLocker-protected removable drives can be recovered’ is set to ‘Enabled’

Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard’ is set to ‘Enabled: True’

Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Recovery Key’ is set to ‘Enabled: Do not allow 256-bit recovery key’

Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Recovery Password’ is set to ‘Enabled: Do not allow 48-digit recovery password’

Ensure ‘Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives’ is set to ‘Enabled: False’

Ensure ‘Configure minimum PIN length for startup’ is set to ‘Enabled: 7 or more characters’