Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'

中レベル 2手動レビューpower-platform

説明

All environments of Microsoft Dataverse use SQL Server Transparent Data Encryption (TDE) to perform real-time encryption of data when written to disk, also known as encryption at rest. By default, Microsoft stores and manages the database encryption key for environments. The manage keys feature in the Microsoft Power Platform admin center gives administrators the ability to self-manage the database encryption key that is associated with the Dataverse tenant. Enable sensitive data encryption at rest using Customer Managed Keys rather than Microsoft Managed keys. Note: This feature is only available in tenants with 1,000 or more users. An exception to this recommendation will be needed for those tenants that have under 1,000 users. By default, Microsoft stores and manages the database encryption key for organizational environments, so administrators don't have to. The manage keys featur...

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Ensure that Customer Managed Keys are utilized. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Ensure self-managed encryption keys are utilized. 6. Click Close (data will not be re-encrypted).

修正方法

修正方法: ガイダンスまたは IaC パッチ

Configure Customer Managed Keys. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Under Change Encryption Key insert the new key followed by Change Note: It is important to safeguard the encryption key. 6. Click Close

プロパティ

オペレーティングシステム: すべて
タグ: cryptoencryptionpower-platformsaas
参照: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.1 Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'