this post was submitted on 14 Aug 2024
300 points (97.5% liked)

Technology

58076 readers
4792 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 16 points 1 month ago (3 children)

[…] device encryption will be enabled by default when you first sign in or set up a device with a Microsoft account or work / school account.

For devices with a TPM, this has literally been the case since Windows 10 1803 back in 2018.

[–] bandwidthcrisis 3 points 1 month ago (2 children)

But that's not the case for Windows Home, is it? The FDE setting just takes me to a page to upgrade to Pro. My laptop does have TPM.

[–] [email protected] 2 points 1 month ago (1 children)

It is, Secure boot and the TPM must both be enabled.

If you check Msinfo32 / “System Information” with admin rights, there is a “device encryption” listing that maybhave additional information.

There are rare instances where a device won’t support automatic encryption due to “Un-allowed DMA capable bus/device(s) detected” which requires a registry tweak to work around

[–] bandwidthcrisis 1 points 1 month ago

Un-allowed DMA capable bus/device(s)

And there it is in msinfo!

Thanks very much. I've been using veracrypt for years, it's good to know that I have another option (especially to simplify things for family members).