1.2.4.2.3.4 Set 'Recovery Key' to 'Do not allow 256-bit recovery key'

Information

This policy setting allows you to control how BitLocker-protected removable data drives are recovered
in the absence of the required credentials.

Solution

Make sure 'Recovery Key' is set to 'Do not allow 256-bit recovery key'

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: CONTINGENCY PLANNING, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CP-10(6), 800-53|SC-28(1), CSCv6|10.3, CSCv6|13.2

Plugin: Windows

Control ID: 480886436d3b6ea6eff5fbcc18046ff751838ec6635b67337032588a982790f8