Home
Security Hardening
CIS Windows 7 Workstation BitLocker V3.2.0

CIS Windows 7 Workstation BitLocker V3.2.0

Ensure ‘Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup’ is set to ‘IEEE 1394 device setup classes’
Details This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device...
Ensure ‘Require additional authentication at startup: Allow BitLocker without a compatible TPM’ is set to ‘Enabled: False’
Details This policy setting allows you to configure whether you can use BitLocker without a Trusted Platform Module (TPM), instead...
Ensure ‘Require additional authentication at startup: Configure TPM startup:’ is set to ‘Enabled: Do not allow TPM’
Details This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts. This policy...
Ensure ‘Require additional authentication at startup: Configure TPM startup key and PIN:’ is set to ‘Enabled: Do not allow startup key and PIN with TPM’
Details This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts. This policy...
Ensure ‘Require additional authentication at startup: Configure TPM startup key:’ is set to ‘Enabled: Do not allow startup key with TPM’
Details This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts. This policy...
Ensure ‘Require additional authentication at startup: Configure TPM startup PIN:’ is set to ‘Enabled: Require startup PIN with TPM’
Details This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts. This policy...
Ensure ‘Require additional authentication at startup’ is set to ‘Enabled’
Details This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts and whether...

CIS Windows 7 Workstation BitLocker V3.2.0

Ensure ‘Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup’ is set to ‘IEEE 1394 device setup classes’

Ensure ‘Require additional authentication at startup: Allow BitLocker without a compatible TPM’ is set to ‘Enabled: False’

Ensure ‘Require additional authentication at startup: Configure TPM startup:’ is set to ‘Enabled: Do not allow TPM’

Ensure ‘Require additional authentication at startup: Configure TPM startup key and PIN:’ is set to ‘Enabled: Do not allow startup key and PIN with TPM’

Ensure ‘Require additional authentication at startup: Configure TPM startup key:’ is set to ‘Enabled: Do not allow startup key with TPM’

Ensure ‘Require additional authentication at startup: Configure TPM startup PIN:’ is set to ‘Enabled: Require startup PIN with TPM’

Ensure ‘Require additional authentication at startup’ is set to ‘Enabled’