STIGQter: STIG Summary: Microsoft Windows 11 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

Secure Boot must be enabled on Windows 11 systems.

DISA Rule

SV-253257r1210281_rule

Vulnerability Number

V-253257

Group Title

SRG-OS-000424-GPOS-00188

Rule Version

WN11-00-000020

Severity

CAT II

CCI(s)

CCI-002421 - Implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.

Weight

Fix Recommendation

Enable Secure Boot in the system firmware.

Check Contents

Verify the system firmware is configured for Secure Boot.

Run "System Information".

Under "System Summary", if "Secure Boot State" does not display "On", this is a finding.

Vulnerability Number

V-253257

Documentable

False

Rule Version

WN11-00-000020

Severity Override Guidance

Verify the system firmware is configured for Secure Boot.

Run "System Information".

Under "System Summary", if "Secure Boot State" does not display "On", this is a finding.

Check Content Reference

Target Key

5471