Windows Hotpatch and PDE fix

This commit is contained in:
Paolo Matarazzo 2024-11-19 06:43:53 -05:00
parent b59bbee1ab
commit 4a868c10b7
10 changed files with 19 additions and 30 deletions

View File

@ -342,8 +342,6 @@ There's a lot more to learn about Windows Autopatch: this [Forrester Consulting
- [Windows IT Pro Blog](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/bg-p/Windows-ITPro-blog/label-name/Windows%20Autopatch) - [Windows IT Pro Blog](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/bg-p/Windows-ITPro-blog/label-name/Windows%20Autopatch)
- [Windows Autopatch community](https://techcommunity.microsoft.com/t5/windows-autopatch/bd-p/Windows-Autopatch) - [Windows Autopatch community](https://techcommunity.microsoft.com/t5/windows-autopatch/bd-p/Windows-Autopatch)
<!--
## :::image type="icon" source="images/soon-button-title.svg" border="false"::: Windows Hotpatch ## :::image type="icon" source="images/soon-button-title.svg" border="false"::: Windows Hotpatch
Windows Hotpatch is a feature designed to enhance security and minimize disruptions. With Windows Hotpatch, organizations can apply critical security updates without requiring a system restart, reducing the time to adopt a security update by 60% from the moment the update is offered. Hotpatch updates streamline the installation process, enhance compliance efficiency, and provide a per-policy level view of update statuses for all devices. Windows Hotpatch is a feature designed to enhance security and minimize disruptions. With Windows Hotpatch, organizations can apply critical security updates without requiring a system restart, reducing the time to adopt a security update by 60% from the moment the update is offered. Hotpatch updates streamline the installation process, enhance compliance efficiency, and provide a per-policy level view of update statuses for all devices.
@ -354,8 +352,6 @@ By utilizing hotpatching through Windows Autopatch, the number of system restart
- [Windows Autopatch documentation](/windows/deployment/windows-autopatch/) - [Windows Autopatch documentation](/windows/deployment/windows-autopatch/)
-->
## OneDrive for work or school ## OneDrive for work or school
:::row::: :::row:::

View File

@ -22,11 +22,8 @@ New:
- [VBS key protection](identity-protection-advanced-credential-protection.md#-vbs-key-protection) - [VBS key protection](identity-protection-advanced-credential-protection.md#-vbs-key-protection)
- [Virtualization-based security enclaves](application-security-application-isolation.md#-virtualization-based-security-enclaves) - [Virtualization-based security enclaves](application-security-application-isolation.md#-virtualization-based-security-enclaves)
- [Win32 app isolation](application-security-application-isolation.md#-win32-app-isolation) - [Win32 app isolation](application-security-application-isolation.md#-win32-app-isolation)
- [Windows protected print](operating-system-security-system-security.md#-windows-protected-print)
<!--
- [Windows Hotpatch](cloud-services-protect-your-work-information.md#-windows-hotpatch) - [Windows Hotpatch](cloud-services-protect-your-work-information.md#-windows-hotpatch)
--> - [Windows protected print](operating-system-security-system-security.md#-windows-protected-print)
Enhanced: Enhanced:
@ -35,7 +32,7 @@ Enhanced:
- [Device encryption](operating-system-security-encryption-and-data-protection.md#device-encryption) - [Device encryption](operating-system-security-encryption-and-data-protection.md#device-encryption)
- [Local Security Authority (LSA) protection](identity-protection-advanced-credential-protection.md#local-security-authority-lsa-protection) - [Local Security Authority (LSA) protection](identity-protection-advanced-credential-protection.md#local-security-authority-lsa-protection)
- [Passkeys](identity-protection-passwordless-sign-in.md#passkeys) - [Passkeys](identity-protection-passwordless-sign-in.md#passkeys)
- [Personal data encryption (PDE)](operating-system-security-encryption-and-data-protection.md#personal-data-encryption-pde) - [Personal data encryption](operating-system-security-encryption-and-data-protection.md#personal-data-encryption)
- [Secured kernel](hardware-security-silicon-assisted-security.md#secured-kernel) - [Secured kernel](hardware-security-silicon-assisted-security.md#secured-kernel)
- [Server Message Block file services](operating-system-security-network-security.md#server-message-block-file-services) - [Server Message Block file services](operating-system-security-network-security.md#server-message-block-file-services)
- [Windows Hello PIN](identity-protection-passwordless-sign-in.md#windows-hello-pin) - [Windows Hello PIN](identity-protection-passwordless-sign-in.md#windows-hello-pin)

File diff suppressed because one or more lines are too long

Binary file not shown.

Before

Width:  |  Height:  |  Size: 1.4 MiB

After

Width:  |  Height:  |  Size: 1.4 MiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 556 KiB

After

Width:  |  Height:  |  Size: 556 KiB

View File

@ -64,21 +64,21 @@ Encrypted hard drives enable:
- [Encrypted hard drive](../operating-system-security/data-protection/encrypted-hard-drive.md) - [Encrypted hard drive](../operating-system-security/data-protection/encrypted-hard-drive.md)
## Personal Data Encryption (PDE) ## Personal Data Encryption
Personal Data Encryption (PDE) is a user-authenticated encryption mechanism designed to protect user's content. PDE uses Windows Hello for Business as its modern authentication scheme, with PIN or biometric authentication methods. The encryption keys used by PDE are securely stored within the Windows Hello container. When a user signs in with Windows Hello, the container is unlocked, making the keys available to decrypt the user's content. Personal Data Encryption is a user-authenticated encryption mechanism designed to protect user's content. Personal Data Encryption uses Windows Hello for Business as its modern authentication scheme, with PIN or biometric authentication methods. The encryption keys used by Personal Data Encryption are securely stored within the Windows Hello container. When a user signs in with Windows Hello, the container is unlocked, making the keys available to decrypt the user's content.
The initial release of PDE in Windows 11, version 22H2, introduced a set of public APIs that applications can adopt to safeguard content. The initial release of Personal Data Encryption in Windows 11, version 22H2, introduced a set of public APIs that applications can adopt to safeguard content.
[!INCLUDE [new-24h2](includes/new-24h2.md)] [!INCLUDE [new-24h2](includes/new-24h2.md)]
PDE is further enhanced with *PDE for known folders*, which extends protection to the Windows folders: Documents, Pictures, and Desktop. Personal Data Encryption is further enhanced with *Personal Data Encryption for known folders*, which extends protection to the Windows folders: Documents, Pictures, and Desktop.
:::image type="content" source="images/pde.png" alt-text="Screenshot of files encrypted with PDE showing a padlock." border="false"::: :::image type="content" source="images/pde.png" alt-text="Screenshot of files encrypted with Personal Data Encryption showing a padlock." border="false":::
[!INCLUDE [learn-more](includes/learn-more.md)] [!INCLUDE [learn-more](includes/learn-more.md)]
- [Personal Data Encryption (PDE)](../operating-system-security/data-protection/personal-data-encryption/index.md) - [Personal Data Encryption](../operating-system-security/data-protection/personal-data-encryption/index.md)
## Email encryption ## Email encryption

View File

@ -62,7 +62,7 @@ landingContent:
url: /windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center url: /windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center
- text: BitLocker - text: BitLocker
url: /windows/security/operating-system-security/data-protection/bitlocker/ url: /windows/security/operating-system-security/data-protection/bitlocker/
- text: Personal Data Encryption (PDE) - text: Personal Data Encryption
url: /windows/security/operating-system-security/data-protection/personal-data-encryption url: /windows/security/operating-system-security/data-protection/personal-data-encryption
- text: Windows security baselines - text: Windows security baselines
url: /windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines url: /windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines
@ -78,7 +78,7 @@ landingContent:
links: links:
- text: Configure BitLocker - text: Configure BitLocker
url: /windows/security/operating-system-security/data-protection/bitlocker/configure url: /windows/security/operating-system-security/data-protection/bitlocker/configure
- text: Configure PDE - text: Configure Personal Data Encryption
url: /windows/security/operating-system-security/data-protection/personal-data-encryption/configure url: /windows/security/operating-system-security/data-protection/personal-data-encryption/configure
- linkListType: whats-new - linkListType: whats-new
links: links:

View File

@ -1,11 +1,11 @@
--- ---
title: Personal Data Encryption (PDE) title: Personal Data Encryption
description: Personal Data Encryption unlocks user encrypted files at user sign-in instead of at boot. description: Personal Data Encryption unlocks user encrypted files at user sign-in instead of at boot.
ms.topic: how-to ms.topic: how-to
ms.date: 09/24/2024 ms.date: 09/24/2024
--- ---
# Personal Data Encryption (PDE) # Personal Data Encryption
Starting in Windows 11, version 22H2, Personal Data Encryption (PDE) is a security feature that provides file-based data encryption capabilities to Windows. Starting in Windows 11, version 22H2, Personal Data Encryption (PDE) is a security feature that provides file-based data encryption capabilities to Windows.
@ -106,8 +106,8 @@ Certain Windows applications support PDE out of the box. If PDE is enabled on a
## Next steps ## Next steps
- Learn about the available options to configure Personal Data Encryption (PDE) and how to configure them via Microsoft Intune or configuration Service Provider (CSP): [PDE settings and configuration](configure.md) - Learn about the available options to configure Personal Data Encryption and how to configure them via Microsoft Intune or configuration Service Provider (CSP): [PDE settings and configuration](configure.md)
- Review the [Personal Data Encryption (PDE) FAQ](faq.yml) - Review the [Personal Data Encryption FAQ](faq.yml)
<!--links used in this document--> <!--links used in this document-->

View File

@ -1,7 +1,7 @@
items: items:
- name: PDE overview - name: Overview
href: index.md href: index.md
- name: Configure PDE - name: Configure Personal Data Encryption
href: configure.md href: configure.md
- name: PDE frequently asked questions (FAQ) - name: Frequently asked questions (FAQ)
href: faq.yml href: faq.yml

View File

@ -3,7 +3,7 @@ items:
href: bitlocker/toc.yml href: bitlocker/toc.yml
- name: Encrypted hard drives - name: Encrypted hard drives
href: encrypted-hard-drive.md href: encrypted-hard-drive.md
- name: Personal data encryption (PDE) - name: Personal data encryption
href: personal-data-encryption/toc.yml href: personal-data-encryption/toc.yml
- name: Email Encryption (S/MIME) - name: Email Encryption (S/MIME)
href: configure-s-mime.md href: configure-s-mime.md