The Microsoft security features of Credential Guard and Device Guard can be implemented in a DeltaV system that is domain-based. These two features work together to protect your user credentials from a cyber-attack known as pass-the hash and your hardware from insecure booting, respectively.
The pass-the hash attack targets the hashes used to encrypt user logins. Credential Guard isolates and hardens those user credentials, protecting them from being compromised.
Device Guard allows your hardware to be run in a secure boot mode, keeping your computer from booting to any software that is not secure boot compliant. Please note that secure boot is the only function of Device Guard that DeltaV currently supports. DeltaV does not currently support the Device Guard code integrity feature.
For more information about both Credential Guard and Device Guard refer to the Emerson white paper entitled: Credential Guard and Device Guard for DeltaV Systems.
Refer to the Emerson KBA #NK-1700-0303 for all supported Dell models, the BIOS versions and settings required, and for the complete instruction to configure this feature.