TMA-POWERPLATFORM-3.1
Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'
Описание
All environments of Microsoft Dataverse use SQL Server Transparent Data Encryption (TDE) to perform real-time encryption of data when written to disk, also known as encryption at rest. By default, Microsoft stores and manages the database encryption key for environments. The manage keys feature in the Microsoft Power Platform admin center gives administrators the ability to self-manage the database encryption key that is associated with the Dataverse tenant. Enable sensitive data encryption at rest using Customer Managed Keys rather than Microsoft Managed keys. Note: This feature is only available in tenants with 1,000 or more users. An exception to this recommendation will be needed for those tenants that have under 1,000 users. By default, Microsoft stores and manages the database encryption key for organizational environments, so administrators don't have to. The manage keys featur...
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Ensure that Customer Managed Keys are utilized. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Ensure self-managed encryption keys are utilized. 6. Click Close (data will not be re-encrypted).
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Configure Customer Managed Keys. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Under Change Encryption Key insert the new key followed by Change Note: It is important to safeguard the encryption key. 6. Click Close
Свойства
- Операционные системы
- Любая
- Теги
- cryptoencryptionpower-platformsaas
- Источник
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.1 Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'