Enable BitLocker

Enable BitLocker Drive Encryption in Control Panel or PowerShell Start gpedit.msc Navigate to Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operatin System Drives Enable following Settings Require additional authentication at startup Allow enhanced PINs for startup (OPTIONAL) Configure minimum PIN legnt for startup (OPTIONAL) Configure pre-boot PIN in PowerShell

Monitor CRL refreshness

It is vital that CRL is fresh and available otherwise your PKI is not healthy. Often i hear that Customer create a reminder in ther calender. Even that kind of effort the PKI outage is quite common, and reson is CRL that have exiperd. I stumbled over this tool get-crlfreshness. This powershell cmdlet in short… Continue Reading Monitor CRL refreshness