1.2.4.2.2.4 Set 'Recovery Key' to 'Do not allow 256-bit recovery key'

Information

This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence
of the required startup key information.

Solution

Make sure 'Recovery Key' is set to 'Do not allow 256-bit recovery key'

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: CONTINGENCY PLANNING, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CP-10(6), 800-53|SC-28(1), CSCv6|10.3, CSCv6|13.2

Plugin: Windows

Control ID: 8aa3fbe2369cd60c58c20b807d6411db050b062ff032aa27165ae132e34665b0