Share via


IDeploymentSecuritySettings Interface

Definition

[System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.StackHCI.Models.Api20240401.DeploymentSecuritySettingsTypeConverter))]
public interface IDeploymentSecuritySettings : Microsoft.Azure.PowerShell.Cmdlets.StackHCI.Runtime.IJsonSerializable
[<System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.StackHCI.Models.Api20240401.DeploymentSecuritySettingsTypeConverter))>]
type IDeploymentSecuritySettings = interface
    interface IJsonSerializable
Public Interface IDeploymentSecuritySettings
Implements IJsonSerializable
Derived
Attributes
Implements

Properties

BitlockerBootVolume

When set to true, BitLocker XTS_AES 256-bit encryption is enabled for all data-at-rest on the OS volume of your Azure Stack HCI cluster. This setting is TPM-hardware dependent.

BitlockerDataVolume

When set to true, BitLocker XTS-AES 256-bit encryption is enabled for all data-at-rest on your Azure Stack HCI cluster shared volumes.

CredentialGuardEnforced

When set to true, Credential Guard is enabled.

DriftControlEnforced

When set to true, the security baseline is re-applied regularly.

DrtmProtection

By default, Secure Boot is enabled on your Azure HCI cluster. This setting is hardware dependent.

HvciProtection

By default, Hypervisor-protected Code Integrity is enabled on your Azure HCI cluster.

SideChannelMitigationEnforced

When set to true, all the side channel mitigations are enabled

SmbClusterEncryption

When set to true, cluster east-west traffic is encrypted.

SmbSigningEnforced

When set to true, the SMB default instance requires sign in for the client and server services.

WdacEnforced

WDAC is enabled by default and limits the applications and the code that you can run on your Azure Stack HCI cluster.

Methods

ToJson(JsonObject, SerializationMode) (Inherited from IJsonSerializable)

Applies to