The EFS encryption system in Windows

As for Windows, the encryption mechanisms are only available for the professional versions. In this specific case, we are talking about Windows Pro and Enterprise. However, if we have a free version, we will at least be able to decrypt the drives and access the data. Even if the data encryption version is not available.

Windows 7 and Windows Server 2008 and later versions have two different types of encryption. One is EFS. This is an encryption system that can encrypt both individual files and folders within the hard drive. The other is BitLocker. Specifically, this is software capable of encrypting an entire drive to prevent unauthorized users from accessing the data on it. Below, we will describe the features of each one. We can then determine the differences between EFS and BitLocker.

The EFS encryption system in Windows

EFS stands for Encrypting File System. Specifically, this feature was introduced since NTFS 3.0 version and appeared for the first time in Windows 2000. What it does is to allow files to be encrypted on NTFS partitions. This is intended to protect sensitive data. It should also be noted that EFS is incompatible with folder compression. In summary, EFS is a fast way to encrypt files and folders. Please remember that only manually selected items will be encrypted. That is, if you add one later, then it will not be encrypted.

It is crucial to know the EFS encryption will be linked to a user account. This means that the encrypted data will only be accessible to that user and will be locked for the rest. It should also be noted that the encryption is transparent. Therefore, if an unauthorized user accesses that account, then the data will be available to him. It is not even necessary for him to know the password.

Another key point to know is that the EFS encryption key in Windows is stored in the operating system itself. Consequently, it does not use the hardware’s Trusted Platform Module. Therefore, a cybercriminal with the necessary knowledge could extract this key to access these encrypted files. Similarly, if that file were at a certain point in a temporary cache, on another part of the disk or another drive, it could also fall into the hands of the attacker.

How to encrypt files with EFS in Windows

This is a simple procedure that requires no configuration or additional downloads. Suppose we want to encrypt a folder called osradar. To achieve this, just right-click on the folder and open the Properties. Next, click on the General tab and then open the Advanced Options.

In the next window, we will see a series of additional options. Please scroll down and check the Encrypt content to protect data box.

Back to the previous window, it is time to click on Apply. Consequently, a new confirmation window will be displayed. Once there, the wizard will ask if we want to change the attributes of the folder and all the included subfolders and elements. Please select the latter option for better security.

After this, the process of encrypting the elements will begin. Kindly note that this may take some time, depending on the size of the folder.

How BitLocker works in Windows

The BitLocker encryption system provides disk encryption for entire volumes. In short, its main feature is that it allows to perform full-drive encryption. To this end, BitLocker uses a standard AES encryption algorithm in CBC mode with a 128-bit key. However, it is also possible to set a key length of 256 bits and configure it with the more secure XTS. This way we give you more security.

Thanks to this mechanism, we can encrypt an entire drive, a hard disk or a removable storage medium. This prevents unauthorized users from accessing the data contained on the drive. Even data copied after the encryption process. Its great advantage is that we do not have to manually encrypt the newly added data. In addition, this tool completely encrypts the entire drive. Consequently, no user will be able to access it without the corresponding to unlock password.

How to enable BitLocker in Windows

To enable BitLocker encryption, follow the steps below:

• Open Control Panel.
• Click System and Security, then under BitLocker Drive Encryption, select Manage BitLocker.

Then we will see a screen like this one and the units that we will be able to encrypt with BitLocker:

The window displays all the drives to which you can apply BitLocker. We will even see that it is possible to encrypt removable drives. A security measure in case one day we lose a removable storage drive with confidential data. To learn about the process and its steps, we invite you to check our tutorial. From this post we will be able to go deeper into the differences between EFS and BitLocker.

Conclusion

Undoubtedly, the best Windows encryption we can use is BitLocker. Thanks to it, it will take care of encrypting the entire hard disk. Therefore, we can breathe easy. From then on, all data will be automatically encrypted. BitLocker is also recommended because it uses more secure algorithms. On the other hand, EFS is specialized in encrypting data in particular. The advantages are that it is faster and consumes fewer resources than the previous one. However, the algorithms are not as secure as those of BitLocker. In addition, we have to be prudent that we have selected the files correctly. So, we recommend using BitLocker. Finally, we have seen the differences between EFS and BitLocker. See you soon!

The post Differences between EFS and BitLocker appeared first on Linux Windows and android Tutorials.

BitLocker. The Windows Encryption Technology.

BitLocker makes use of the Reliable Platform Module technology which allows for greater security in case of an external attack. It is used to validate the booting of the server. In addition, it guarantees that the hard disk is in optimal security and operation conditions. BitLocker uses 5 operational modes in its operation:

• TPM + PIN + Password: The system encrypts the information with TPM. Additionally, the administrator must enter his or her PIN and password to gain access.
• TPM+Password: The system encrypts the information with TPM and the administrator must provide a password.
• TPM + PIN: The system encrypts the information with TPM and the administrator must provide his access ID.
• Password: The administrator must provide the password to access management.
• TPM: No action is required from the administrator.

How to Install BitLocker on Windows Server 2019/2016

The first thing you have to do is open the Server Manager. Once there, click on add roles and features.

Then select Role-based and features-based installation:

As usual in this type of installation, select the server.

Please skip the window referring to Roles. Then, in the Features window, scroll down to get BitLocker Drive Encryption

When you click on the corresponding box, a window with the necessary features for the installation will be displayed.

Back to the previous window, press next to continue the installation.

Below you will see a summary of the installation. Please press Install.

After a few moments, the installation will be completed. Please note that you must reboot the server to complete the process.

Finally, in this simple way we have seen how to enable BitLocker in Windows Server 2019/2016. In addition, it is our intention to increase the security of your server. All right, that’s it for today. I can’t say goodbye without inviting you to see our post about importing and exporting the security policy in Windows Server 2019/2016. Goodbye

The post How to enable BitLocker in Windows Server 2019/2016 appeared first on Linux Windows and android Tutorials.

Some features of BitLocker.

BitLocker has an option that allows blocking the system startup process. Consequently, the system will load only when the user enters a pin or a device with the password. Here are some of its most important features:

• BitLocker supports 128- and 256-bit XTS-AES keys
• Encrypt and recover devices with Azure Active Directory
• A new Group Policy designed to configure Windows pre-boot recovery has been added
• It is possible to enable the Credential Guard function without UEFI blocking
• Improved Credentials Manager Support
• XTS-AES encryption algorithm This is special against those of direct attacks to the encryption. These attacks are based on manipulating encrypted text to edit system changes

Process for encrypting the external storage drive.

In the first place, right-click on the USB drive and select Turn on BitLocker.

Forthwith, it will start the configuration wizard. It will ask for the type of unlocking: Password and smart card. In this case, we will use a password. With this intention, add the password along with its validation.

Next, you can choose where to backup the recovery key. The options are: Save to Microsoft account, save to file and print the recovery key. For this purpose, save the key to a file.

It then stores the key in a secure directory.

Subsequently, two encryption options are offered. New encryption with improved security but not compatible with older versions of Windows. And compatible encryption. Depending on the use that will be given to the USB device then make the selection.

After the previous preparations have been made, the wizard will start the encryption of the device.

After completing the encryption process, click on Close to exit the wizard.

Then open the file browser and on the removable drive, you will see a lock icon indicating that the drive is encrypted.

Reverse the encryption process

After encrypting the unit, it is necessary to enter the password to gain access. If at any point you no longer need BitLocker, you can disable it. With this in mind, right-click on the drive and select Manage BitLocker

In the next window, click on Turn Off BitLocker

A warning message will be displayed. Please confirm the Turn off BitLocker to begin the process.

Immediately the assistant will start the process. When finished, press Close to exit.

Now when you enter the file browser, the removable drive is displayed without a lock icon. Consequently, it can be accessed without any problem

Finally, we’ve seen how to encrypt USB drives in Windows 10. With this simple method, you can add a password and encrypt the USB drive using BitLocker. This increases the security of our USB devices and protects the most sensitive information. Well, this is it! Before I say goodbye, I invite you to review our post about scheduling the automatic shutdown in Windows 10

The post How to encrypt USB drives in Windows 10 appeared first on Linux Windows and android Tutorials.