Linux Virtual Machines Should Use Secure Boot

Description:

To protect against the installation of malware-based rootkits and boot kits, enable Secure Boot on supported Linux virtual machines. Secure Boot ensures that only signed operating systems and drivers will be allowed to run. This assessment only applies to Linux virtual machines that have the Azure Monitor Agent installed.

Remediation:

Enabling Secure Boot will trigger an immediate system reboot. To enable it:
1. From Azure Virtual Machines, open your machine.
2. From the VM details page, open the 'Configuration' tab and select 'Secure boot'.
3. Select 'Save'.