• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

BitLocker - Choose Encryption Cipher Strength in Windows 8


Brink

Administrator
Administrator
mvp
Posts
23,916
BitLocker - Choose Encryption Cipher Strength in Windows 8
This tutorial will show you how to configure the algorithm and cipher strength used by BitLocker Drive Encryption to be AES 128-bit or 256-bit in Windows 8.
Published by Brink
#1
Category:
ByLine
How to Choose BitLocker Drive Encryption Method and Cipher Strength in Windows 8
Synopsis
This tutorial will show you how to configure the algorithm and cipher strength used by BitLocker Drive Encryption to be AES 128-bit or 256-bit in Windows 8.
How to Choose BitLocker Drive Encryption Method and Cipher Strength in Windows 8

information   Information
BitLocker Drive Encryption supports AES 128-bit and 256-bit encryption keys. AES 256-bit provides a stronger level of security and is less likely to be successfully attacked by the use of brute-force methods. By default, BitLocker Drive Encryption uses AES 128-bit in Windows 8.

This tutorial will show you how to configure the algorithm and cipher strength used by BitLocker Drive Encryption to be AES 128-bit or 256-bit in Windows 8.

You must be signed in as an administrator to be able to do the steps in this tutorial.

Note   Note

  • This is used on drives that you turn on BitLocker Drive Encryption for after choosing AES-128 or AES-256.
  • Changing the encryption method has no effect if the drive is already encrypted or if encryption is in progress.
  • This does not apply to hardware encrypted drives. Encrypted drives utilize their own algorithm and it is set by the drive during partitioning.
warning   Warning
BitLocker Drive Encryption is only available in the Windows 8 Pro and Windows 8 Enterprise editions.





OPTION ONE
Choose Drive Encryption Method & Cipher Strength using Group Policy

1. Press the Windows + R keys to open the Run dialog, type gpedit.msc, and press Enter.​
2. If prompted by UAC, then click/tap on Yes.​
3. In the left pane of Group Policy, click/tap on to expand Computer Configuration, Administrative Templates, Windows Components, and open BitLocker Drive Encryption. (see screenshot below)​
GPEDIT-1.jpg
4. In the right pane of BitLocker Drive Encryption, double click/tap on Choose drive encryption method and cipher strength to edit it. (see screenshot above)​
5. Do step 6 or 7 below for what you would like to do.​
6. To Use the Default AES 128-bit Method and Cipher
A) Select (dot) either Not Configured or Disabled, and go to step 8 below. (see screenshot below step 8)​
NOTE: Not Configured is the default setting.​
7. To Choose the Drive Encryption Method and Cipher Strength
A) Select (dot) Enabled. (see screenshot below step 8)​
B) Under the Options section, select the encryption method you want, and go to step 8 below. (see screenshot below step 8)​
  • AES 128-bit (default)
  • AES 256-bit
8. Click/tap on OK. You can now close Group Policy if you like.​
GPEDIT-2.jpg




OPTION TWO
Choose Drive Encryption Method and Cipher Strength using REG File

1. Do step 2, 3, or 4 below for what you would like to do.​
2. To Use the Default AES 128-bit Method and Cipher
NOTE: This is the default setting, and is the same as doing step 6 in Option One above.​
A) Click/tap on the Download button below to download the file below, and go to step 5 below.​
AES_Default.reg
download
3. To Choose AES 128-bit Drive Encryption Method and Cipher Strength
NOTE: This is the same as doing step 7 in Option One above.​
A) Click/tap on the Download button below to download the file below, and go to step 5 below.​
Choose_AES_128-bit.reg
download
4. To Choose AES 256-bit Drive Encryption Method and Cipher Strength
NOTE: This is the same as doing step 7 in Option One above.​
A) Click/tap on the Download button below to download the file below, and go to step 5 below.​
Choose_AES_256-bit.reg
download
5. Save the .reg file to your desktop.​
6. Double click/tap on the downloaded .reg file to merge it.​
7. If prompted, click/tap on Run, Yes (UAC), Yes, and OK.​
8. Sign out and sign in, or restart the PC to apply.​
9. When finished, you can delete the downloaded .reg file if you like.​


That's it,
Shawn


Related Tutorials


 
Last edited:

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    3 x 27" Asus VE278Q
    Screen Resolution
    1920x1080
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

Users Who Are Viewing This Thread (Users: 0, Guests: 1)