BitLocker (device encryption variant)

E182213

BitLocker (device encryption variant) is a streamlined, automatic disk encryption feature designed for certain Windows devices, particularly tablets and lightweight PCs, to protect data by encrypting the system drive with minimal user configuration.

All labels observed (9)

How this entity was disambiguated

Statements (47)

Predicate Object
instanceOf Windows security feature
device encryption technology
disk encryption feature
activationMode automatic when requirements are met
basedOn BitLocker Drive Encryption
componentOf Windows device security
configurationStyle minimal user configuration
streamlined
defaultState enabled automatically on supported new devices
designedFor 2-in-1 PCs
consumer devices
lightweight PCs
tablets
developedBy Microsoft
differenceFromFullBitLocker fewer configuration options
primarily automatic enablement
differsFrom full BitLocker Drive Encryption
encryptionAlgorithm AES
encryptionScope system drive
introducedAs simplified variant of BitLocker
keyStorage TPM
managementLevel reduced management options compared to full BitLocker
operatingSystem Windows
Windows 10
Windows 11
Windows 8.1
policyControl can be managed via Group Policy in managed environments
primaryFunction automatic encryption of the system drive
protection of data at rest
protects Windows system partition
user data stored on system drive
recoveryKeyBackup Active Directory (on managed devices)
linked to: Active Directory

Microsoft account
relatedFeature BitLocker To Go
full BitLocker Drive Encryption control panel
requires Microsoft account for key backup
Secure Boot
linked to: verified boot

Trusted Platform Module
UEFI firmware
requiresEdition supported Windows editions with device encryption capability
securityGoal prevent unauthorized offline access to data
protect data if device is lost or stolen
supports automatic device encryption on first sign-in
targetUser non-technical users
userInterface largely hidden from user
uses hardware-based encryption support when available
software-based encryption when hardware encryption is unavailable

How these facts were elicited

Referenced by (14)

Full triples — surface form annotated when it differs from this entity's canonical label.

Windows RT includedFeature BitLocker (device encryption variant)
Windows 11 supports BitLocker device encryption
linked to: BitLocker (device encryption variant)
Windows Vista feature BitLocker Drive Encryption
linked to: BitLocker (device encryption variant)
Windows 7 securityFeature BitLocker (in select editions)
linked to: BitLocker (device encryption variant)
Windows 7 securityFeature BitLocker To Go (in select editions)
linked to: BitLocker (device encryption variant)
Windows 10 Team supports BitLocker device encryption
linked to: BitLocker (device encryption variant)
Encrypting File System complements BitLocker Drive Encryption
linked to: BitLocker (device encryption variant)
Windows Vista Home Basic doesNotInclude BitLocker Drive Encryption
subject linked to: Home Basic
linked to: BitLocker (device encryption variant)
Windows Vista Enterprise includesFeature BitLocker Drive Encryption
subject linked to: Enterprise
linked to: BitLocker (device encryption variant)
Windows Server 2008 securityFeature BitLocker Drive Encryption (some editions)
linked to: BitLocker (device encryption variant)
BitLocker (device encryption variant) basedOn BitLocker Drive Encryption
linked to: BitLocker (device encryption variant)
BitLocker (device encryption variant) differsFrom full BitLocker Drive Encryption
linked to: BitLocker (device encryption variant)
BitLocker (device encryption variant) relatedFeature BitLocker To Go
linked to: BitLocker (device encryption variant)
Windows Security app integratesWith BitLocker
linked to: BitLocker (device encryption variant)