pulumi-azure-native-kotlin/com.pulumi.azurenative.azurestackhci.kotlin.outputs/SecuritySettingsResponse

SecuritySettingsResponse

data class SecuritySettingsResponse(val bitlockerBootVolume: Boolean? = null, val bitlockerDataVolumes: Boolean? = null, val credentialGuardEnforced: Boolean? = null, val driftControlEnforced: Boolean? = null, val drtmProtection: Boolean? = null, val hvciProtection: Boolean? = null, val sideChannelMitigationEnforced: Boolean? = null, val smbClusterEncryption: Boolean? = null, val smbSigningEnforced: Boolean? = null, val wdacEnforced: Boolean? = null)

The SecuritySettings of AzureStackHCI Cluster.

Constructors

Link copied to clipboard
constructor(bitlockerBootVolume: Boolean? = null, bitlockerDataVolumes: Boolean? = null, credentialGuardEnforced: Boolean? = null, driftControlEnforced: Boolean? = null, drtmProtection: Boolean? = null, hvciProtection: Boolean? = null, sideChannelMitigationEnforced: Boolean? = null, smbClusterEncryption: Boolean? = null, smbSigningEnforced: Boolean? = null, wdacEnforced: Boolean? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard
val bitlockerBootVolume: Boolean? = null

When set to true, BitLocker XTS_AES 256-bit encryption is enabled for all data-at-rest on the OS volume of your Azure Stack HCI cluster. This setting is TPM-hardware dependent.

Link copied to clipboard
val bitlockerDataVolumes: Boolean? = null

When set to true, BitLocker XTS-AES 256-bit encryption is enabled for all data-at-rest on your Azure Stack HCI cluster shared volumes.

Link copied to clipboard
val credentialGuardEnforced: Boolean? = null

When set to true, Credential Guard is enabled.

Link copied to clipboard
val driftControlEnforced: Boolean? = null

When set to true, the security baseline is re-applied regularly.

Link copied to clipboard
val drtmProtection: Boolean? = null

By default, Secure Boot is enabled on your Azure HCI cluster. This setting is hardware dependent.

Link copied to clipboard
val hvciProtection: Boolean? = null

By default, Hypervisor-protected Code Integrity is enabled on your Azure HCI cluster.

Link copied to clipboard
val sideChannelMitigationEnforced: Boolean? = null

When set to true, all the side channel mitigations are enabled

Link copied to clipboard
val smbClusterEncryption: Boolean? = null

When set to true, cluster east-west traffic is encrypted.

Link copied to clipboard
val smbSigningEnforced: Boolean? = null

When set to true, the SMB default instance requires sign in for the client and server services.

Link copied to clipboard
val wdacEnforced: Boolean? = null

WDAC is enabled by default and limits the applications and the code that you can run on your Azure Stack HCI cluster.