1.2.4.2.3.8 Set 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption' to 'False'

Information

This policy setting allows you to manage BitLocker's use of hardware-based encryption on removable data drives
and specify which encryption algorithms it can use with hardware-based encryption.

Solution

Make sure 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption' is set to 'False'

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-28(1), CSCv6|13.2

Plugin: Windows

Control ID: 8a645a0c28bc6005ebe39639e2f828738ba253334356609eedc8e6de4854c61a