diff --git a/windows/client-management/mdm/personaldataencryption-csp.md b/windows/client-management/mdm/personaldataencryption-csp.md index c64e9f1290..f3feda7d33 100644 --- a/windows/client-management/mdm/personaldataencryption-csp.md +++ b/windows/client-management/mdm/personaldataencryption-csp.md @@ -1,46 +1,173 @@ --- -title: PersonalDataEncryption CSP -description: Learn how the PersonalDataEncryption configuration service provider (CSP) is used by the enterprise to protect data confidentiality of PCs and devices. -ms.author: v-nsatapathy -ms.topic: article +title: PDE CSP +description: Learn more about the PDE CSP. +author: vinaypamnani-msft +manager: aaroncz +ms.author: vinpa +ms.date: 02/17/2023 +ms.localizationpriority: medium ms.prod: windows-client ms.technology: itpro-manage -author: nimishasatapathy -ms.localizationpriority: medium -ms.date: 09/12/2022 -ms.reviewer: -manager: dansimp +ms.topic: reference --- -# PersonalDataEncryption CSP + -The PersonalDataEncryption configuration service provider (CSP) is used by the enterprise to protect data confidentiality of PCs and devices. This CSP was added in Windows 11, version 22H2. + +# PDE CSP -The following shows the PersonalDataEncryption configuration service provider in tree format: + + +The Personal Data Encryption (PDE) configuration service provider (CSP) is used by the enterprise to protect data confidentiality of PCs and devices. This CSP was added in Windows 11, version 22H2. + -``` + +The following example shows the PDE configuration service provider in tree format. + +```text ./User/Vendor/MSFT/PDE --- EnablePersonalDataEncryption --- Status --------- PersonalDataEncryptionStatus - +--- EnablePersonalDataEncryption +--- Status +------ PersonalDataEncryptionStatus ``` + -**EnablePersonalDataEncryption**: -- 0 is default (disabled) -- 1 (enabled) will make Personal Data Encryption (PDE) public API available to applications for the user: [UserDataProtectionManager Class](/uwp/api/windows.security.dataprotection.userdataprotectionmanager). + +## EnablePersonalDataEncryption -The public API allows the applications running as the user to encrypt data as soon as this policy is enabled. However, prerequisites must be met for PDE to be enabled. + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :x: Device
:heavy_check_mark: User | :x: Home
:x: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:x: Windows SE | :heavy_check_mark: Windows 11, version 22H2 [10.0.22621] and later | + -**Status/PersonalDataEncryptionStatus**: Reports the current status of Personal Data Encryption (PDE) for the user. If prerequisites of PDE aren't met, then the status will be 0. If all prerequisites are met for PDE, then PDE will be enabled and status will be 1. + +```User +./User/Vendor/MSFT/PDE/EnablePersonalDataEncryption +``` + -> [!Note] -> The policy is only applicable on Enterprise and Education SKUs. + + +Allows the Admin to enable Personal Data Encryption. Set to '1' to set this policy. + -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|No|No| -|Business|No|No| -|Enterprise|No|Yes| -|Education|No|Yes| + + +The [UserDataProtectionManager Class](/uwp/api/windows.security.dataprotection.userdataprotectionmanager) public API allows the applications running as the user to encrypt data as soon as this policy is enabled. However, prerequisites must be met for PDE to be enabled. + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 | Disable Personal Data Encryption. | +| 1 | Enable Personal Data Encryption. | + + + + + + + + + +## Status + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :x: Device
:heavy_check_mark: User | :x: Home
:x: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:x: Windows SE | :heavy_check_mark: Windows 11, version 22H2 [10.0.22621] and later | + + + +```User +./User/Vendor/MSFT/PDE/Status +``` + + + + + + + + +Reports the current status of Personal Data Encryption (PDE) for the user. + +- If prerequisites of PDE aren't met, then the status will be 0. +- If all prerequisites are met for PDE, then PDE will be enabled and status will be 1. + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | node | +| Access Type | Get | + + + + + + + + + +### Status/PersonalDataEncryptionStatus + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :x: Device
:heavy_check_mark: User | :x: Home
:x: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:x: Windows SE | :heavy_check_mark: Windows 11, version 22H2 [10.0.22621] and later | + + + +```User +./User/Vendor/MSFT/PDE/Status/PersonalDataEncryptionStatus +``` + + + + +This node reports the current state of Personal Data Encryption for a user. '0' means disabled. '1' means enabled. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Get | + + + + + + + + + + + + + + +## Related articles + +[Configuration service provider reference](configuration-service-provider-reference.md) diff --git a/windows/client-management/mdm/personaldataencryption-ddf-file.md b/windows/client-management/mdm/personaldataencryption-ddf-file.md index 8584167779..9550cce774 100644 --- a/windows/client-management/mdm/personaldataencryption-ddf-file.md +++ b/windows/client-management/mdm/personaldataencryption-ddf-file.md @@ -1,32 +1,29 @@ --- -title: PersonalDataEncryption DDF file -description: Learn about the OMA DM device description framework (DDF) for the PersonalDataEncryption configuration service provider. -ms.author: v-nsatapathy -ms.topic: article +title: PDE DDF file +description: View the XML file containing the device description framework (DDF) for the PDE configuration service provider. +author: vinaypamnani-msft +manager: aaroncz +ms.author: vinpa +ms.date: 02/17/2023 +ms.localizationpriority: medium ms.prod: windows-client ms.technology: itpro-manage -author: nimishasatapathy -ms.localizationpriority: medium -ms.date: 09/10/2022 -ms.reviewer: -manager: dansimp +ms.topic: reference --- -# PersonalDataEncryption DDF file + -This topic shows the OMA DM device description framework (DDF) for the **PersonalDataEncryption** configuration service provider. +# PDE DDF file -Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-ddf.md). - -The XML below is the current version for this CSP. +The following XML file contains the device description framework (DDF) for the PDE configuration service provider. ```xml -]> +]> 1.2 + + PDE ./User/Vendor/MSFT @@ -46,6 +43,11 @@ The XML below is the current version for this CSP. + + 10.0.22621 + 1.0 + 0x4;0x1B;0x48;0x54;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0xAB;0xAC;0xB4;0xBC;0xBF;0xCD; + EnablePersonalDataEncryption @@ -124,4 +126,8 @@ The XML below is the current version for this CSP. -``` \ No newline at end of file +``` + +## Related articles + +[PDE configuration service provider reference](personaldataencryption-csp.md) diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml index 42ddd6a7a1..fc595e5156 100644 --- a/windows/client-management/mdm/toc.yml +++ b/windows/client-management/mdm/toc.yml @@ -801,10 +801,10 @@ items: items: - name: PassportForWork DDF file href: passportforwork-ddf.md - - name: PersonalDataEncryption + - name: PDE href: personaldataencryption-csp.md items: - - name: PersonalDataEncryption DDF file + - name: PDE DDF file href: personaldataencryption-ddf-file.md - name: Personalization href: personalization-csp.md