1.2.4.2.2.15 Set 'Require additional authentication at startup' to 'Enabled'

Information

This policy setting allows you to configure whether BitLocker requires additional authentication each time the
computer starts and whether you are using BitLocker with or without a Trusted Platform Module (TPM).

Solution

Make sure 'Require additional authentication at startup' is set to 'Enabled'

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2(1), CSCv6|13.2, CSCv6|16.1

Plugin: Windows

Control ID: 92be7144a1cc66f1780e7a51416fea4fed11be7d25ead0797e44b9634ece3c54