BitLocker & Boot Security
Secure Boot, UEFI and the BlackLotus mitigations
Harden the Windows boot chain: verify Secure Boot, apply the CVE-2023-24932 BlackLotus revocations, adopt the 2023 certificates and lock UEFI firmware.
Advanced
Guides tagged
#secure-boot
BitLocker & Boot Security
BitLocker hardening: XTS-AES 256, TPM+PIN, key escrow
Configure BitLocker for real-world threats: encryption method, TPM-only vs TPM+PIN, recovery key escrow to AD or Entra ID, Secure Boot, DMA protection and fleet verification.
Intermediate