This commit is contained in:
Paolo Matarazzo
2023-10-05 15:09:03 -04:00
parent d67f6ce4cc
commit 6bc5ac7144
2 changed files with 9 additions and 6 deletions

View File

@ -7,14 +7,14 @@ ms.topic: include
### Choose drive encryption method and cipher strength
With this policy you can configure an encryption algorithm and key cipher strength for fixed data drives, operating system drives, and removable data drives individually.
With this policy, you can configure an encryption algorithm and key cipher strength for fixed data drives, operating system drives, and removable data drives individually.
Recommended settings: `XTS-AES` alhorithm for all drives. The choice of key size, 128 bit or 256 bit depends on the performance of the device. For more performant hard drives and CPU, choose 256 bit key, for less performant ones use 128.
Recommended settings: `XTS-AES` algorithm for all drives. The choice of key size, 128 bit or 256 bit depends on the performance of the device. For more performant hard drives and CPU, choose 256-bit key, for less performant ones use 128.
> [!IMPORTANT]
> Key size might be required by regulators or industry.
If you disable or do not configure this policy setting, BitLocker uses the default encryption method of `XTS-AES 128-bit`.
If you disable or don't configure this policy setting, BitLocker uses the default encryption method of `XTS-AES 128-bit`.
> [!NOTE]
> This policy doesn't apply to encrypted drives. Encrypted drives utilize their own algorithm, which is set by the drive during partitioning.