Hacker News new | ask | show | jobs
by scholia 3832 days ago
Disk encryption is enabled on some shipping machines, which is to say, it has been enabled on the three brand new Windows 10 machines I've used. The OEM is responsible for the installation, so I'd assume this is an OEM choice, but obviously I don't know.

I didn't notice at first, and really, there's no reason why I should have noticed. Also, I assumed Windows 10 Home didn't come with BitLocker anyway.

The Windows 10 security overview on Microsoft TechNet includes the following statements:

"Modern Windows devices are increasingly protected with device encryption out of the box and support SSO to seamlessly protect the BitLocker encryption keys from cold boot attacks."

"BitLocker supports encrypted hard drives with onboard encryption hardware built in, which allows administrators to use the familiar BitLocker administrative tools to manage them."

https://technet.microsoft.com/en-us/library/mt601297%28v=vs....

1 comments

> Also, I assumed Windows 10 Home didn't come with BitLocker anyway.

Apparently it's "device encryption" but it's not BitLocker. And while it's optional at the moment, it becomes compulsory in summer 2016.