TMA-POWERPLATFORM-3.1

Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'

보통레벨 2수동 검토power-platform

설명

All environments of Microsoft Dataverse use SQL Server Transparent Data Encryption (TDE) to perform real-time encryption of data when written to disk, also known as encryption at rest. By default, Microsoft stores and manages the database encryption key for environments. The manage keys feature in the Microsoft Power Platform admin center gives administrators the ability to self-manage the database encryption key that is associated with the Dataverse tenant. Enable sensitive data encryption at rest using Customer Managed Keys rather than Microsoft Managed keys. Note: This feature is only available in tenants with 1,000 or more users. An exception to this recommendation will be needed for those tenants that have under 1,000 users. By default, Microsoft stores and manages the database encryption key for organizational environments, so administrators don't have to. The manage keys featur...

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Ensure that Customer Managed Keys are utilized. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Ensure self-managed encryption keys are utilized. 6. Click Close (data will not be re-encrypted).

조치 방법

조치 방식: 가이드 또는 인프라 패치

Configure Customer Managed Keys. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Under Change Encryption Key insert the new key followed by Change Note: It is important to safeguard the encryption key. 6. Click Close

속성

운영 체제: 모두
태그: cryptoencryptionpower-platformsaas
참고 자료: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.1 Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'