Detections
Analytics

1.4 WN11-00-000020

Information

Secure Boot must be enabled on Windows 11 systems.

GROUP ID: V-253257
RULE ID: SV-253257r1117271

Secure Boot is a standard that ensures systems boot only to a trusted operating system. Secure Boot is required to support additional security features in Windows 11, including virtualization-based Security and Credential Guard. If Secure Boot is turned off, these security features will not function.

Solution

Enable Secure Boot in the system firmware.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8(1), CCI|CCI-002421, Rule-ID|SV-253257r1117271_rule, STIG-ID|WN11-00-000020, Vuln-ID|V-253257

Plugin: Windows

Control ID: 9bfc78a698fc3e6d5591902f45e4f8ee1b42ab3ecc3e81347fa5ff8f2d3c6eca