Thunderbolt Share Secure Configuration for Controlled Environments

[RolandPG]

Our organization would like to explore the possibility of Thunderbolt Share deployment across CMMC environments for developer machines and potentially on manufacturing floor equipment, such as HMIs and PLC programming stations. We need to restrict functionality to KVM-only mode to maintain compliance with certain NIST controls, for example:

• Limit system access to authorized users
• Restrict applications to the least functionality required
• Control removable media

Our Team is looking for:

• Configuration option to disable file transfer capabilities while maintaining KVM functionality
• Group Policy or registry-based enforcement mechanism
• What is the expected Audit logging during the use of Thunderbolt Share?
  
  

Without these controls, Thunderbolt Share presents data exfiltration risks for controlled environments. The KVM functionality alone would provide significant operational value without introducing compliance violations.

Can Intel provide:

• Technical documentation for enterprise deployment with security controls
• Roadmap for compliance-focused features
• List of potential Windows events associated with Thunderbolt Share

This directly impacts our ability to approve Thunderbolt Share for ourselves and our clients

[RandyT_Intel]

Hi @RolandPG,

I’ll coordinate this request internally, as some of the information you’re asking for isn’t publicly available. Once I have the necessary details, I’ll reach out to you via email. These documents may require internal access to retrieve.

Regards,

Randy T.

Intel Customer Support Technician

[RandyT_Intel]

Hi @RolandPG,

I've sent you a private email so we can discuss this matter further in detail. Please check your inbox at your convenience, and feel free to reply there if you have any questions or need additional support.

Looking forward to resolving this with you!

Regards,

Randy T.

Intel Customer Support Technician