this post was submitted on 14 Aug 2024
300 points (97.5% liked)

Technology

59712 readers
5873 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s
[email protected]
[email protected]
L4s
enu
300
Microsoft is enabling BitLocker device encryption by default on Windows 11 (www.theverge.com)
submitted 3 months ago by [email protected] to c/technology
121 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 16 points 3 months ago (1 children)

[…] device encryption will be enabled by default when you first sign in or set up a device with a Microsoft account or work / school account.

For devices with a TPM, this has literally been the case since Windows 10 1803 back in 2018.

[–] bandwidthcrisis 3 points 3 months ago (1 children)

But that's not the case for Windows Home, is it? The FDE setting just takes me to a page to upgrade to Pro. My laptop does have TPM.

[–] [email protected] 2 points 3 months ago (1 children)

It is, Secure boot and the TPM must both be enabled.

If you check Msinfo32 / “System Information” with admin rights, there is a “device encryption” listing that maybhave additional information.

There are rare instances where a device won’t support automatic encryption due to “Un-allowed DMA capable bus/device(s) detected” which requires a registry tweak to work around

[–] bandwidthcrisis 1 points 3 months ago

Un-allowed DMA capable bus/device(s)

And there it is in msinfo!

Thanks very much. I've been using veracrypt for years, it's good to know that I have another option (especially to simplify things for family members).