ISE and Windows Registries

[jdurkin]

Hi, 

1. Can ISE check the windows registry setting via Bitlocker for TPM?

2. Can ISE check the windows registry setting if Boot Password is Set? 

Thank you, 

Jim 

[Nidhi]

Hello Jim, 

From ISE , you can create a posture condition for registry check. however, you have to be absolutely sure about the registry check you want to perform. 

For Bitlocker, you might want to look under HKLM\Software\Microsoft\Windows\CurrentVersion\Bitlocker

Bios is not available through Windows. hence I doubt there is a registry entry for it which ISE can check.

I googled and found that wmi calls and vb scripts have been used to get this information. but again, this is out of ISE scope. 

Hope this helps. 

Thanks,

Nidhi

[Nidhi · Accepted solution]

Hello Jim, 

From ISE , you can create a posture condition for registry check. however, you have to be absolutely sure about the registry check you want to perform. 

For Bitlocker, you might want to look under HKLM\Software\Microsoft\Windows\CurrentVersion\Bitlocker

Bios is not available through Windows. hence I doubt there is a registry entry for it which ISE can check.

I googled and found that wmi calls and vb scripts have been used to get this information. but again, this is out of ISE scope. 

Hope this helps. 

Thanks,

Nidhi

[dbredben]

Nidhi,  Are you able to get on a call to discuss?

[Jason Kunst · Accepted solution]

Please reach out internally. As I understand several TME and PM have already been involved. This is a public community. Please remove customer name from the posting.