1.2.4.2.1.16 Set 'Require use of smart cards on fixed data drives' to 'True'

Information

This policy setting allows you to specify whether smart cards can be used to authenticate user access to
the BitLocker-protected fixed data drives on a computer.

Solution

Make sure 'Require use of smart cards on fixed data drives' is set to 'True'

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|IA-5(11), 800-53|SC-28(1), CSCv6|13.2, CSCv6|16.11

Plugin: Windows

Control ID: 0f5686199e700be8b9f2020955fe1de2d894ae91a84eb00aa8e288235f82f5ba