mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 13:27:23 +00:00
73 lines
3.9 KiB
YAML
73 lines
3.9 KiB
YAML
### YamlMime:FAQ
|
|
|
|
metadata:
|
|
title: Frequently asked questions for Personal Data Encryption (PDE)
|
|
description: Answers to common questions regarding Personal Data Encryption (PDE).
|
|
ms.topic: faq
|
|
ms.date: 03/13/2023
|
|
|
|
title: Frequently asked questions for Personal Data Encryption (PDE)
|
|
summary: |
|
|
Here are some answers to common questions regarding Personal Data Encryption (PDE)
|
|
|
|
sections:
|
|
- name: Single section - ignored
|
|
questions:
|
|
- question: Can PDE encrypt entire volumes or drives?
|
|
answer: |
|
|
No. PDE only encrypts specified files and content.
|
|
|
|
- question: Is PDE a replacement for BitLocker?
|
|
answer: |
|
|
No. It's still recommended to encrypt all volumes with BitLocker Drive Encryption for increased security.
|
|
|
|
- question: How are files and content protected by PDE selected?
|
|
answer: |
|
|
[PDE APIs](/uwp/api/windows.security.dataprotection.userdataprotectionmanager) are used to select which files and content are protected using PDE.
|
|
|
|
- question: Do I need to use OneDrive in Microsoft 365 as my backup provider?
|
|
answer: |
|
|
No. PDE doesn't have a requirement for a backup provider, including OneDrive in Microsoft 365. However, backups are recommended in case the keys used by PDE to protect files are lost. OneDrive in Microsoft 365 is a recommended backup provider.
|
|
|
|
- question: What is the relation between Windows Hello for Business and PDE?
|
|
answer: |
|
|
During user sign-on, Windows Hello for Business unlocks the keys that PDE uses to protect content.
|
|
|
|
- question: Can a file be protected with both PDE and EFS at the same time?
|
|
answer: |
|
|
No. PDE and EFS are mutually exclusive.
|
|
|
|
- question: Can PDE protected content be accessed after signing on via a Remote Desktop connection (RDP)?
|
|
answer: |
|
|
No. Accessing PDE protected content over RDP isn't currently supported.
|
|
|
|
- question: Can PDE protected content be accessed via a network share?
|
|
answer: |
|
|
No. PDE protected content can only be accessed after signing on locally to Windows with Windows Hello for Business credentials.
|
|
|
|
- question: How can it be determined if a file is protected with PDE?
|
|
answer: |
|
|
- Files protected with PDE and EFS will both show a padlock on the file's icon. To verify whether a file is protected with PDE vs. EFS:
|
|
1. In the properties of the file, navigate to **General** > **Advanced**. The option **Encrypt contents to secure data** should be selected.
|
|
2. Select the **Details** button.
|
|
3. If the file is protected with PDE, under **Protection status:**, the item **Personal Data Encryption is:** will be marked as **On**.
|
|
- [`cipher.exe`](/windows-server/administration/windows-commands/cipher) can also be used to show the encryption state of the file.
|
|
|
|
- question: Can users manually encrypt and decrypt files with PDE?
|
|
answer: |
|
|
Currently users can decrypt files manually but they can't encrypt files manually. For information on how a user can manually decrypt a file, see the section **Disable PDE and decrypt files** in [Personal Data Encryption (PDE)](index.md).
|
|
|
|
- question: If a user signs into Windows with a password instead of Windows Hello for Business, will they be able to access their PDE protected content?
|
|
answer: |
|
|
No. The keys used by PDE to protect content are protected by Windows Hello for Business credentials and will only be unlocked when signing on with Windows Hello for Business PIN or biometrics.
|
|
|
|
- question: What encryption method and strength does PDE use?
|
|
answer: |
|
|
PDE uses AES-CBC with a 256-bit key to encrypt content.
|
|
|
|
additionalContent: |
|
|
## See also
|
|
- [Personal Data Encryption (PDE)](index.md)
|
|
- [Configure Personal Data Encryption (PDE) polices in Intune](configure-pde-in-intune.md)
|
|
|