Encrypting File System, BitLocker, and BitLocker To Go

The Windows operating system supports three main methods to encrypt stored data. Individual applications use additional methods to encrypt data before they are written to the disk. These methods are embedded into the operating system. They occur as the data are written to the disk, not before. Each approach has its place and should be considered based on specific capabilities. The best choice of data at rest encryption depends on the scope of encrypted data and the location of the data. These three methods are specific to Microsoft Windows operating systems.

Encrypting File System

Microsoft introduced the EFS in Windows 2000. This feature works only for NTFS file systems. It allows ...

Get Security Strategies in Windows Platforms and Applications, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.