Skip to content

Commit 62a4c7a

Browse files
Merge pull request #15900 from carlosmayol/patch-19
Update manage-secure-baseline.md
2 parents 907316f + d84d52d commit 62a4c7a

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

azure-stack/hci/manage/manage-secure-baseline.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -122,20 +122,21 @@ The following cmdlet properties are for the *AzureStackOSConfigAgent* module. Th
122122
- `Enable-AzsSecurity`   -Scope <Local | Cluster>
123123
- `Disable-AzsSecurity`  -Scope <Local | Cluster>
124124
- **FeatureName** - <CredentialGuard | DriftControl | DRTM | HVCI | SideChannelMitigation | SMBEncryption | SMBSigning | VBS>
125-
- Credential Guard
126125
- Drift Control
126+
- Credential Guard
127127
- VBS (Virtualization Based Security)- We only support enable command.
128128
- DRTM (Dynamic Root of Trust for Measurement)
129129
- HVCI (Hypervisor Enforced if Code Integrity)
130130
- Side Channel Mitigation
131-
- SMB Encryption
132131
- SMB Signing
132+
- SMB Cluster encryption
133133
134134
The following table documents supported security features, whether they support drift control, and whether a reboot is required to implement the feature.
135135
136136
|Name |Feature |Supports drift control |Reboot required |
137137
|-----|--------|-----------------------|----------------|
138138
|Enable <br> |Virtualization Based Security (VBS) |Yes |Yes |
139+
|Enable <br> |Credential Guard |Yes |Yes |
139140
|Enable <br> Disable |Dynamic Root of Trust for Measurement (DRTM) |Yes |Yes |
140141
|Enable <br> Disable |Hypervisor-protected Code Integrity (HVCI) |Yes |Yes |
141142
|Enable <br> Disable |Side channel mitigation |Yes |Yes |

0 commit comments

Comments
 (0)