+SYS.2.1.A36 Self-Managed Use of SecureBoot and TPM (H)

SYS.2.1.A36 Self-Managed Use of SecureBoot and TPM (H)

On UEFI-compatible systems, the bootloader, kernel, and all required firmware components SHOULD be signed by self-controlling key material, and any key material that is not required SHOULD be removed. If Trusted Platform Module (TPM) is not required, it SHOULD be disabled.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems