windows full disk encryption
windows full disk encryption :- BitLocker is a computer hard drive encryption and security program released by Microsoft Corporation as a native application. BitLocker is a full disk encryption feature included with Microsoft Windows versions starting with Windows Vista. It is designed to protect data by providing encryption for entire volumes. By default, it uses the AES encryption algorithm in cipher block chaining (CBC) or XTS mode with a 128-bit or 256-bit key. CBC is not used over the whole disk; it is applied to each individual sector. BitLocker and other full disk encryption systems can be attacked by a rogue boot manager. Once the malicious bootloader captures the secret, it can decrypt the Volume Master Key (VMK), which would then allow access to decrypt or modify any information on an encrypted hard disk.
By configuring a TPM to protect the trusted boot pathway, including the BIOS and boot sector, BitLocker can mitigate this threat. BitLocker is a logical volume encryption system. (A volume spans part of a hard disk drive, the whole drive or more than one drive.) When enabled, TPM and BitLocker can ensure the integrity of the trusted boot path (e.g. BIOS and boot sector), in order to prevent most offline physical attacks and boot sector malware.
How to apply windows full disk encryption
Step1:- Open “Control Panel”
Step 2:- Choose the drop down box of view by then select “Large Icons” or “Small icons”
Step 3:- Now choose “BitLocker Drive Encryption” Then press “Enter”.
Step 4:- Now choose the drop down arrow of required drive where you want to apply BitLocker.
Step 5:- Now click on “Turn on BitLocker”
Step 6:- It will take some time to “BitLocker initializes the drive”.
Step 7:- Now check the check box of “Use a password to unlock the drive”.
Step 8:- Now You can see that disable password text box will be enable after pressing check box.
Step 9:- Now you have to enter password and then reenter again same password. “Password should contain uppercase letters, lowercase letters, number, spaces and symbols”.
Step 10:- Now click on “Next”.
Step 11:- Now select any option three of them as per as your requirement. I will choose “Save to the file” means i want to save recovery key on my computer drive. if you forget your password then you can use this recovery key to access you data of that particular drive where BitLocker apply. You can also print your recovery key.
Step 12:- Now save the recovery key by pressing save option. before clicking save option choose the location where you want to save recovery key file.
Step 13:- Now click on “Next”
Step 14:- Now choose any one of them radio button as per as your requirement. then click on “Next”.
Step 15:- Again choose any one of them radio button. Then click on “Next”.
Step 16:- Now click on “Start encrypting”.
Step 17:- It will take some to as per as your size of data of drive.
Step 18:- You can see the “Encryption is completed of selected drive”.
I hope that you understand my post. if you like this post then share my post, and comment on my post if you have any suggestion or Queries related to windows full disk encryption. Thank you!