1.2.4.2.2.25 Set 'Allow enhanced PINs for startup' to 'Enabled'

Information

This policy setting allows you to configure whether or not enhanced startup PINs are used with BitLocker.

NOTE: Some queries in this .audit require BitLocker to be enabled in order to function properly.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Make sure 'Allow enhanced PINs for startup' is set to 'Enabled'

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2(1), CSCv6|8.4, CSCv6|13.2, CSCv6|16.11

Plugin: Windows

Control ID: 29bc1cc3465d0d000ededdc4c2ec545627c58f3ef3676e223bea778b5ccf1da6