TMA-POWERPLATFORM-3.1
Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'
Açıklama
All environments of Microsoft Dataverse use SQL Server Transparent Data Encryption (TDE) to perform real-time encryption of data when written to disk, also known as encryption at rest. By default, Microsoft stores and manages the database encryption key for environments. The manage keys feature in the Microsoft Power Platform admin center gives administrators the ability to self-manage the database encryption key that is associated with the Dataverse tenant. Enable sensitive data encryption at rest using Customer Managed Keys rather than Microsoft Managed keys. Note: This feature is only available in tenants with 1,000 or more users. An exception to this recommendation will be needed for those tenants that have under 1,000 users. By default, Microsoft stores and manages the database encryption key for organizational environments, so administrators don't have to. The manage keys featur...
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Ensure that Customer Managed Keys are utilized. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Ensure self-managed encryption keys are utilized. 6. Click Close (data will not be re-encrypted).
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Configure Customer Managed Keys. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Under Change Encryption Key insert the new key followed by Change Note: It is important to safeguard the encryption key. 6. Click Close
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- cryptoencryptionpower-platformsaas
- Referans
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.1 Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'