Windows OS: Secure Boot must be enabled | EventSentry

PingSentry | Discord | System32 | GitHub | Free tools

Windows OS: Secure Boot must be enabled

e8bb4b60-e081-427e-924e-e99a1aacf387

Secure Boot is a standard that ensures systems boot only to a trusted operating system. Secure Boot is required to support additional security features in Windows, including Virtualization Based Security and Credential Guard. If Secure Boot is turned off, these security features will not function.

More info: https://docs.microsoft.com/en-us/windows/security/information-protection/secure-the-windows-10-boot-process

Remediation

Enable Secure Boot in the system firmware.

More info: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/secure-boot-isnt-configured-correctly-troubleshooting

STIG
Server
2022: https://stigviewer.com/stigs/microsoft_windows_server_2022/2025-01-14/finding/V-254284
2019: https://stigviewer.com/stigs/microsoft_windows_server_2019/2025-01-15/finding/V-205857

Desktop
W11: https://stigviewer.com/stigs/microsoft_windows_11/2024-09-12/finding/V-253257
W10: https://stigviewer.com/stigs/microsoft_windows_10/2024-11-25/finding/V-220700

Tags

stig-low-server stig-low-desktop compliance-desktop compliance-server security-server security-desktop desktop server