Detections
Analytics

WN25-00-000470 - Windows Server 2025 must have Secure Boot enabled.

Information

Secure Boot is a standard that ensures systems boot only to a trusted operating system. Secure Boot is required to support additional security features in Windows, including Virtualization Based Security and Credential Guard. If Secure Boot is turned off, these security features will not function.

Solution

Enable Secure Boot in the system firmware.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-278032r1268251_rule, STIG-ID|WN25-00-000470, Vuln-ID|V-278032

Plugin: Windows

Control ID: 1fd4ac10c4c5e55a025809ad6bbd1b38ad06e57207392d3d5132f8a85ff30caf