Windows 8.1 will encrypt everything by default - yikes!

mikeytg

New Member
Pro User
Messages
315
Location
Joisey

My Computer

System One

  • OS
    Windows 8.1 consumer 64 bit
    Computer type
    Laptop
    System Manufacturer/Model
    Acer Aspire M5 481PT-6644
    CPU
    Intel Core I5
    Memory
    6 GB
    Hard Drives
    Spinning/SSD hybrid 500GB/20GB
    Mouse
    ELAN Trackpad
    Internet Speed
    18mbs/5mbs
    Browser
    Chrome
    Antivirus
    Windows Defender
This is the first I've seen this. Seems like it should have been publicized more. I'm not sure I want Microsoft or anyone else holding my encryption keys. Luckily, this only applies to computers with a TPM, which I don't have. Do you?

Windows 8.1 Will Start Encrypting Hard Drives By Default: Everything You Need to Know

Hi there

?????

I'm running W8.1 RTM Enterprise - and nothing has been encrypted so far -- I've copied data to external drives and used them on other machines etc etc.

BITLOCKER is another issue - but you have to enable that anyway if you want to use it.

(BTW what's a TPM on a computer ??)

Cheers
jimbo
 

My Computer

System One

  • OS
    Linux Centos 7, W8.1, W7, W2K3 Server W10
    Computer type
    PC/Desktop
    Monitor(s) Displays
    1 X LG 40 inch TV
    Hard Drives
    SSD's * 3 (Samsung 840 series) 250 GB
    2 X 3 TB sata
    5 X 1 TB sata
    Internet Speed
    0.12 GB/s (120Mb/s)
According to the article people who update from 8 to 8.1 will have to enable it if they want it. TPM is the "trusted Platform Module", some kind of giz on the motherboard that provides security in some way (probably designed by the NSA). Bitlocker requires it too, but there is a way to use bitlocker without it. I found a way to see if I have a TPM (i dont) but now I can't find the article that said how to check.
 

My Computer

System One

  • OS
    Windows 8.1 consumer 64 bit
    Computer type
    Laptop
    System Manufacturer/Model
    Acer Aspire M5 481PT-6644
    CPU
    Intel Core I5
    Memory
    6 GB
    Hard Drives
    Spinning/SSD hybrid 500GB/20GB
    Mouse
    ELAN Trackpad
    Internet Speed
    18mbs/5mbs
    Browser
    Chrome
    Antivirus
    Windows Defender
It says this on Technet:
Windows 8.1 - What's New, IT Pro Features, Devices, UI | TechNet
Pervasive Device Encryption
Device encryption previously found on Windows RT and Windows Phone 8 is now available in all editions of Windows. It is enabled out of the box and can be configured with additional BitLocker protection and management capability on the Pro and Enterprise SKUs. Consumer devices are automatically encrypted and protected when using a Microsoft account. Data on any Windows connected standby device is automatically protected (encrypted) with device encryption. Organizations that need to manage encryption can easily take add additional BitLocker protection options and manageability to these devices.
 

My Computer

System One

  • OS
    Windows 8.1, 10
I'm still trying to make my mind up on whether I like this.

From some points of view it's good for security; if someone steals your computer the data is secure (except from Microsoft and any Government Agency who asks them for your key!).

It looks like you have to choose to enable it when upgrading from Windows 8, but presumably people who buy the full version of Windows 8.1 or a device with 8.1 pre-installed will have it on by default. This is good for the non-techie folks who wouldn't know about disk encryption but would be glad of it if they get their laptop stolen on a train or whatever.

However it makes recovering from some scenarios much harder, and even having a backup on the Microsoft Account isn't a total protection; I've seen cases on other Forums where people delete their Microsoft Account almost on a whim, and the consequences could be much worse if that is their only backup of the computer's encryption key.

And of course people using Linux (and Linux-based tools such as a Kaspersky Recovery Disk, and perhaps some backup software for instance) presumably won't be able to get into the PC any more? If you have a virus and want to boot from Kaspersky (or other product) recovery disk to fix it; how will you do that? (Having said that; I don't know how you'd do that now with Bitlocker; presumably there's a way...)

So I dunno...:think:
 

My Computer

System One

  • OS
    Windows 8.1, 10

My Computer

System One

  • OS
    Windows 8 Pro with Media Center/Windows 7
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Asus M2N-MX SE Plus § DualCore AMD Athlon 64 X2, 2300 MHz (11.5 x 200) 4400+ § Corsair Value Select
    CPU
    AMD 4400+/4200+
    Motherboard
    Asus M2N-MX SE Plus/Asus A8M2N-LA (NodusM)
    Memory
    2 GB/3GB
    Graphics Card(s)
    GeForce 8400 GS/GeForce 210
    Sound Card
    nVIDIA GT218 - High Definition Audio Controller
    Monitor(s) Displays
    Hitachi 40" LCD HDTV
    Screen Resolution
    "1842 x 1036"
    Hard Drives
    WDC WD50 00AAKS-007AA SCSI Disk Device
    ST1000DL 002-9TT153 SCSI Disk Device
    WDC WD3200AAJB-00J3A0 ATA Device
    WDC WD32 WD-WCAPZ2942630 USB Device
    WD My Book 1140 USB Device
    PSU
    Works 550w
    Case
    MSI "M-Box"
    Cooling
    Water Cooled
    Keyboard
    Dell Keyboard
    Mouse
    Microsoft Intellimouse
    Internet Speed
    Cable Medium Speed
    Browser
    Chrome/IE 10
    Antivirus
    Eset NOD32 6.x/Win Defend
    Other Info
    Recently lost my Windows 8 on my main PC, had to go back to Windows 7.
Back
Top