Package version:

Interface DeploymentSecuritySettings

The SecuritySettings of AzureStackHCI Cluster.

interface DeploymentSecuritySettings {
    bitlockerBootVolume?: boolean;
    bitlockerDataVolumes?: boolean;
    credentialGuardEnforced?: boolean;
    driftControlEnforced?: boolean;
    drtmProtection?: boolean;
    hvciProtection?: boolean;
    sideChannelMitigationEnforced?: boolean;
    smbClusterEncryption?: boolean;
    smbSigningEnforced?: boolean;
    wdacEnforced?: boolean;
}

Properties

bitlockerBootVolume? bitlockerDataVolumes? credentialGuardEnforced? driftControlEnforced? drtmProtection? hvciProtection? sideChannelMitigationEnforced? smbClusterEncryption? smbSigningEnforced? wdacEnforced?

Properties

OptionalbitlockerBootVolume

bitlockerBootVolume?: boolean

When set to true, BitLocker XTS_AES 256-bit encryption is enabled for all data-at-rest on the OS volume of your Azure Stack HCI cluster. This setting is TPM-hardware dependent.

OptionalbitlockerDataVolumes

bitlockerDataVolumes?: boolean

When set to true, BitLocker XTS-AES 256-bit encryption is enabled for all data-at-rest on your Azure Stack HCI cluster shared volumes.

OptionalcredentialGuardEnforced

credentialGuardEnforced?: boolean

When set to true, Credential Guard is enabled.

OptionaldriftControlEnforced

driftControlEnforced?: boolean

When set to true, the security baseline is re-applied regularly.

OptionaldrtmProtection

drtmProtection?: boolean

By default, Secure Boot is enabled on your Azure HCI cluster. This setting is hardware dependent.

OptionalhvciProtection

hvciProtection?: boolean

By default, Hypervisor-protected Code Integrity is enabled on your Azure HCI cluster.

OptionalsideChannelMitigationEnforced

sideChannelMitigationEnforced?: boolean

When set to true, all the side channel mitigations are enabled

OptionalsmbClusterEncryption

smbClusterEncryption?: boolean

When set to true, cluster east-west traffic is encrypted.

OptionalsmbSigningEnforced

smbSigningEnforced?: boolean

When set to true, the SMB default instance requires sign in for the client and server services.

OptionalwdacEnforced

wdacEnforced?: boolean

WDAC is enabled by default and limits the applications and the code that you can run on your Azure Stack HCI cluster.

Settings

Member Visibility