Detections
Analytics

WN16-00-000470 - Secure Boot must be enabled on Windows Server 2016 systems.

Information

Secure Boot is a standard that ensures systems boot only to a trusted operating system. Secure Boot is required to support additional security features in Windows Server 2016, including Virtualization Based Security and Credential Guard. If Secure Boot is turned off, these security features will not function.

Solution

Enable Secure Boot in the system firmware.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2016_V2R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|III, CCI|CCI-000366, Rule-ID|SV-224864r569186_rule, STIG-ID|WN16-00-000470, STIG-Legacy|SV-101005, STIG-Legacy|V-90355, Vuln-ID|V-224864

Plugin: Windows

Control ID: fe587f2f02ec0adf28268ccf25049e80e9a27a2e78326c7d0dfd38889a47ffa8