| Name | [Preview]: Virtual machines guest attestation status should be healthy Azure Portal |
||||||||||||||||||||
| Id | f6358610-e532-4236-b178-4c65865eb262 | ||||||||||||||||||||
| Version | 1.0.0-preview details on versioning |
||||||||||||||||||||
| Category | Security Center Microsoft docs |
||||||||||||||||||||
| Description | Guest attestation is performed by sending a trusted log (TCGLog) to an attestation server. The server uses these logs to determine whether boot components are trustworthy. This assessment is intended to detect compromises of the boot chain which might be the result of a bootkit or rootkit infection. This assessment only applies to Trusted Launch enabled virtual machines that have Guest Attestation extension installed. | ||||||||||||||||||||
| Mode | All | ||||||||||||||||||||
| Type | BuiltIn | ||||||||||||||||||||
| Preview | True | ||||||||||||||||||||
| Deprecated | FALSE | ||||||||||||||||||||
| Effect | Default AuditIfNotExists Allowed AuditIfNotExists, Disabled |
||||||||||||||||||||
| RBAC Role(s) |
none | ||||||||||||||||||||
| Rule Aliases |
IF (1)
|
||||||||||||||||||||
| Rule ResourceTypes |
IF (1) Microsoft.Compute/virtualMachines/extensions |
||||||||||||||||||||
| Compliance | Not a Compliance control | ||||||||||||||||||||
| History |
|
||||||||||||||||||||
| Initiatives usage |
none | ||||||||||||||||||||
| JSON |
|