Detections
Analytics

WN11-00-000020 - Secure Boot must be enabled on Windows 11 systems.

Information

Secure Boot is a standard that ensures systems boot only to a trusted operating system. Secure Boot is required to support additional security features in Windows 11, including virtualization-based Security and Credential Guard. If Secure Boot is turned off, these security features will not function.

Solution

Enable Secure Boot in the system firmware.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R8_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8(1), CAT|II, CCI|CCI-002421, Rule-ID|SV-253257r1210281_rule, STIG-ID|WN11-00-000020, Vuln-ID|V-253257

Plugin: Windows

Control ID: 4b12c16956662d42e2d6463d0df60e5ae0d4bc1840f196aaea361e8d2ba4a123