deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

bitlocker

Browse Source
This commit is contained in:
Liz Long 2022-12-24 15:43:36 -05:00
parent 20a7d42dfb
commit 7b8c532779
1 changed files with 52 additions and 64 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

116
windows/client-management/mdm/policy-csp-bitlocker.md
View File

@ -1,84 +1,72 @@
--- ---
title: Policy CSP - BitLocker title: Bitlocker Policy CSP
description: Use the Policy configuration service provider (CSP) - BitLocker to manage encryption of PCs and devices. description: Learn more about the Bitlocker Area in Policy CSP
author: vinaypamnani-msft
manager: aaroncz
ms.author: vinpa ms.author: vinpa
ms.topic: article ms.date: 12/24/2022
ms.localizationpriority: medium
ms.prod: windows-client ms.prod: windows-client
ms.technology: itpro-manage ms.technology: itpro-manage
author: vinaypamnani-msft ms.topic: reference
ms.localizationpriority: medium
ms.date: 09/27/2019
ms.reviewer:
manager: aaroncz
--- ---
# Policy CSP - BitLocker <!-- Auto-Generated CSP Document -->
<!-- Bitlocker-Begin -->
# Policy CSP - Bitlocker
<!-- Bitlocker-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- Bitlocker-Editable-End -->
> [!NOTE] <!-- EncryptionMethod-Begin -->
> To manage encryption of PCs and devices, use [BitLocker CSP](./bitlocker-csp.md). ## EncryptionMethod
<hr/> <!-- EncryptionMethod-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later |
<!-- EncryptionMethod-Applicability-End -->
<!--Policies--> <!-- EncryptionMethod-OmaUri-Begin -->
## BitLocker policies ```Device
./Device/Vendor/MSFT/Policy/Config/Bitlocker/EncryptionMethod
```
<!-- EncryptionMethod-OmaUri-End -->
<dl> <!-- EncryptionMethod-Description-Begin -->
<dd> <!-- Description-Source-DDF -->
<a href="#bitlocker-encryptionmethod">Bitlocker/EncryptionMethod</a>
</dd>
</dl>
<hr/>
<!--Policy-->
<a href="" id="bitlocker-encryptionmethod"></a>**Bitlocker/EncryptionMethod**
<!--SupportedSKUs-->
|Edition|Windows 10|Windows 11|
|--- |--- |--- |
|Home|No|No|
|Pro|Yes|Yes|
|Windows SE|No|Yes|
|Business|Yes|Yes|
|Enterprise|Yes|Yes|
|Education|Yes|Yes|
<!--/SupportedSKUs-->
<hr/>
<!--Scope-->
[Scope](./policy-configuration-service-provider.md#policy-scope):
> [!div class = "checklist"]
> * Device
<hr/>
<!--/Scope-->
<!--Description-->
This policy specifies the BitLocker Drive Encryption method and cipher strength. This policy specifies the BitLocker Drive Encryption method and cipher strength.
<!-- EncryptionMethod-Description-End -->
> [!NOTE] <!-- EncryptionMethod-Editable-Begin -->
> XTS-AES 128-bit and XTS-AES 256-bit values are supported only on Windows 10 for desktop. <!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- EncryptionMethod-Editable-End -->
<!--/Description--> <!-- EncryptionMethod-DFProperties-Begin -->
<!--SupportedValues--> **Description framework properties**:
The following list shows the supported values:
- 3 - AES-CBC 128-bit | Property name | Property value |
- 4 - AES-CBC 256-bit |:--|:--|
- 6 - XTS-AES 128-bit (Desktop only) | Format | int |
- 7 - XTS-AES 256-bit (Desktop only) | Access Type | Add, Delete, Get, Replace |
| Allowed Values | Range: `[0-4294967295]` |
| Default Value | 6 |
<!-- EncryptionMethod-DFProperties-End -->
<!--/SupportedValues--> <!-- EncryptionMethod-Examples-Begin -->
<!--/Policy--> <!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<hr/> <!-- EncryptionMethod-Examples-End -->
<!-- EncryptionMethod-End -->
<!-- Bitlocker-CspMoreInfo-Begin -->
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
<!-- Bitlocker-CspMoreInfo-End -->
<!--/Policies--> <!-- Bitlocker-End -->
## Related articles
[Policy configuration service provider](policy-configuration-service-provider.md)