PingSentry   |   Discord   |   System32   |   GitHub   |   Free tools

Security: Systems must have UEFI firmware and be configured to run in UEFI mode, not Legacy BIOS

e0fcf99c-99e4-44e1-ba65-7799bb95df91

UEFI provides additional security features in comparison to legacy BIOS firmware, including Secure Boot. UEFI is required to support additional security features in Windows 11, including virtualization-based Security and Credential Guard. Systems with UEFI that are operating in Legacy BIOS mode will not support these security features.

Remediation

Configure UEFI firmware to run in UEFI mode, not Legacy BIOS mode.

STIG: Server
2016: https://system32.eventsentry.com/stig/viewer/V-224865
2022: https://system32.eventsentry.com/stig/viewer/V-254283
2019: https://system32.eventsentry.com/stig/viewer/V-205856

Desktop:
W11: https://system32.eventsentry.com/stig/viewer/V-253256
W10: https://system32.eventsentry.com/stig/viewer/V-220699

NIST 800: CM-6b
PCI DSS v4.0.1: 10.7, 10.7.1, 10.7.2, 10.7.3
CMMC v2 L3: CM.L3-3.4.2E



Tags

stig-medium-desktop stig-medium-server nist800-53-desktop nist800-53-server cmmc2-l3-desktop cmmc2-l3-server pci-dss-v4-desktop pci-dss-v4-server

Your Privacy Choices

Manage your cookie preferences below:

Helps us improve website performance and understand how visitors use our site.

Allows us to collect feedback about our products and improve them based on your input.

To learn more about our use of cookies, please see our
Privacy Policy.