TMA-POWERPLATFORM-3.1
Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'
Mô tả
All environments of Microsoft Dataverse use SQL Server Transparent Data Encryption (TDE) to perform real-time encryption of data when written to disk, also known as encryption at rest. By default, Microsoft stores and manages the database encryption key for environments. The manage keys feature in the Microsoft Power Platform admin center gives administrators the ability to self-manage the database encryption key that is associated with the Dataverse tenant. Enable sensitive data encryption at rest using Customer Managed Keys rather than Microsoft Managed keys. Note: This feature is only available in tenants with 1,000 or more users. An exception to this recommendation will be needed for those tenants that have under 1,000 users. By default, Microsoft stores and manages the database encryption key for organizational environments, so administrators don't have to. The manage keys featur...
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.
Ensure that Customer Managed Keys are utilized. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Ensure self-managed encryption keys are utilized. 6. Click Close (data will not be re-encrypted).
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Configure Customer Managed Keys. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the screen. 3. Expand Encryption then select Data encryption - A new window will open and may be slow to load 4. Ensure Encryption status is set to Active 5. Under Change Encryption Key insert the new key followed by Change Note: It is important to safeguard the encryption key. 6. Click Close
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- cryptoencryptionpower-platformsaas
- Tham chiếu
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.1 Ensure 'Environments with Critical Data are Encrypted with Customer Managed Keys'