Windows Hotpatch and PDE fix

This commit is contained in:
Paolo Matarazzo 2024-11-19 06:43:53 -05:00
parent b59bbee1ab
commit 4a868c10b7
10 changed files with 19 additions and 30 deletions

View File

@ -342,8 +342,6 @@ There's a lot more to learn about Windows Autopatch: this [Forrester Consulting
- [Windows IT Pro Blog](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/bg-p/Windows-ITPro-blog/label-name/Windows%20Autopatch)
- [Windows Autopatch community](https://techcommunity.microsoft.com/t5/windows-autopatch/bd-p/Windows-Autopatch)
<!--
## :::image type="icon" source="images/soon-button-title.svg" border="false"::: Windows Hotpatch
Windows Hotpatch is a feature designed to enhance security and minimize disruptions. With Windows Hotpatch, organizations can apply critical security updates without requiring a system restart, reducing the time to adopt a security update by 60% from the moment the update is offered. Hotpatch updates streamline the installation process, enhance compliance efficiency, and provide a per-policy level view of update statuses for all devices.
@ -354,8 +352,6 @@ By utilizing hotpatching through Windows Autopatch, the number of system restart
- [Windows Autopatch documentation](/windows/deployment/windows-autopatch/)
-->
## OneDrive for work or school
:::row:::

View File

@ -22,11 +22,8 @@ New:
- [VBS key protection](identity-protection-advanced-credential-protection.md#-vbs-key-protection)
- [Virtualization-based security enclaves](application-security-application-isolation.md#-virtualization-based-security-enclaves)
- [Win32 app isolation](application-security-application-isolation.md#-win32-app-isolation)
- [Windows protected print](operating-system-security-system-security.md#-windows-protected-print)
<!--
- [Windows Hotpatch](cloud-services-protect-your-work-information.md#-windows-hotpatch)
-->
- [Windows protected print](operating-system-security-system-security.md#-windows-protected-print)
Enhanced:
@ -35,7 +32,7 @@ Enhanced:
- [Device encryption](operating-system-security-encryption-and-data-protection.md#device-encryption)
- [Local Security Authority (LSA) protection](identity-protection-advanced-credential-protection.md#local-security-authority-lsa-protection)
- [Passkeys](identity-protection-passwordless-sign-in.md#passkeys)
- [Personal data encryption (PDE)](operating-system-security-encryption-and-data-protection.md#personal-data-encryption-pde)
- [Personal data encryption](operating-system-security-encryption-and-data-protection.md#personal-data-encryption)
- [Secured kernel](hardware-security-silicon-assisted-security.md#secured-kernel)
- [Server Message Block file services](operating-system-security-network-security.md#server-message-block-file-services)
- [Windows Hello PIN](identity-protection-passwordless-sign-in.md#windows-hello-pin)

File diff suppressed because one or more lines are too long

Binary file not shown.

Before

Width:  |  Height:  |  Size: 1.4 MiB

After

Width:  |  Height:  |  Size: 1.4 MiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 556 KiB

After

Width:  |  Height:  |  Size: 556 KiB

View File

@ -64,21 +64,21 @@ Encrypted hard drives enable:
- [Encrypted hard drive](../operating-system-security/data-protection/encrypted-hard-drive.md)
## Personal Data Encryption (PDE)
## Personal Data Encryption
Personal Data Encryption (PDE) is a user-authenticated encryption mechanism designed to protect user's content. PDE uses Windows Hello for Business as its modern authentication scheme, with PIN or biometric authentication methods. The encryption keys used by PDE are securely stored within the Windows Hello container. When a user signs in with Windows Hello, the container is unlocked, making the keys available to decrypt the user's content.
Personal Data Encryption is a user-authenticated encryption mechanism designed to protect user's content. Personal Data Encryption uses Windows Hello for Business as its modern authentication scheme, with PIN or biometric authentication methods. The encryption keys used by Personal Data Encryption are securely stored within the Windows Hello container. When a user signs in with Windows Hello, the container is unlocked, making the keys available to decrypt the user's content.
The initial release of PDE in Windows 11, version 22H2, introduced a set of public APIs that applications can adopt to safeguard content.
The initial release of Personal Data Encryption in Windows 11, version 22H2, introduced a set of public APIs that applications can adopt to safeguard content.
[!INCLUDE [new-24h2](includes/new-24h2.md)]
PDE is further enhanced with *PDE for known folders*, which extends protection to the Windows folders: Documents, Pictures, and Desktop.
Personal Data Encryption is further enhanced with *Personal Data Encryption for known folders*, which extends protection to the Windows folders: Documents, Pictures, and Desktop.
:::image type="content" source="images/pde.png" alt-text="Screenshot of files encrypted with PDE showing a padlock." border="false":::
:::image type="content" source="images/pde.png" alt-text="Screenshot of files encrypted with Personal Data Encryption showing a padlock." border="false":::
[!INCLUDE [learn-more](includes/learn-more.md)]
- [Personal Data Encryption (PDE)](../operating-system-security/data-protection/personal-data-encryption/index.md)
- [Personal Data Encryption](../operating-system-security/data-protection/personal-data-encryption/index.md)
## Email encryption

View File

@ -62,7 +62,7 @@ landingContent:
url: /windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center
- text: BitLocker
url: /windows/security/operating-system-security/data-protection/bitlocker/
- text: Personal Data Encryption (PDE)
- text: Personal Data Encryption
url: /windows/security/operating-system-security/data-protection/personal-data-encryption
- text: Windows security baselines
url: /windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines
@ -78,7 +78,7 @@ landingContent:
links:
- text: Configure BitLocker
url: /windows/security/operating-system-security/data-protection/bitlocker/configure
- text: Configure PDE
- text: Configure Personal Data Encryption
url: /windows/security/operating-system-security/data-protection/personal-data-encryption/configure
- linkListType: whats-new
links:

View File

@ -1,11 +1,11 @@
---
title: Personal Data Encryption (PDE)
title: Personal Data Encryption
description: Personal Data Encryption unlocks user encrypted files at user sign-in instead of at boot.
ms.topic: how-to
ms.date: 09/24/2024
---
# Personal Data Encryption (PDE)
# Personal Data Encryption
Starting in Windows 11, version 22H2, Personal Data Encryption (PDE) is a security feature that provides file-based data encryption capabilities to Windows.
@ -106,8 +106,8 @@ Certain Windows applications support PDE out of the box. If PDE is enabled on a
## Next steps
- Learn about the available options to configure Personal Data Encryption (PDE) and how to configure them via Microsoft Intune or configuration Service Provider (CSP): [PDE settings and configuration](configure.md)
- Review the [Personal Data Encryption (PDE) FAQ](faq.yml)
- Learn about the available options to configure Personal Data Encryption and how to configure them via Microsoft Intune or configuration Service Provider (CSP): [PDE settings and configuration](configure.md)
- Review the [Personal Data Encryption FAQ](faq.yml)
<!--links used in this document-->

View File

@ -1,7 +1,7 @@
items:
- name: PDE overview
- name: Overview
href: index.md
- name: Configure PDE
- name: Configure Personal Data Encryption
href: configure.md
- name: PDE frequently asked questions (FAQ)
- name: Frequently asked questions (FAQ)
href: faq.yml

View File

@ -3,7 +3,7 @@ items:
href: bitlocker/toc.yml
- name: Encrypted hard drives
href: encrypted-hard-drive.md
- name: Personal data encryption (PDE)
- name: Personal data encryption
href: personal-data-encryption/toc.yml
- name: Email Encryption (S/MIME)
href: configure-s-mime.md