SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>BitLocker</title>

</head>

BitLocker

</h1>

</header>

/* start https://en.wikipedia.org/ */

.mw-parser-output .infobox-subbox{padding:0;border:none;margin:-3px;width:auto;min-width:100%;font-size:100%;clear:none;float:none;background-color:transparent}.mw-parser-output .infobox-3cols-child{margin:auto}.mw-parser-output .infobox .navbar{font-size:100%}@media screen{html.skin-theme-clientpref-night .mw-parser-output .infobox-full-data:not(.notheme)>div:not(.notheme)[style]{background:#1f1f23!important;color:#f8f9fa}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .infobox-full-data:not(.notheme)>div:not(.notheme)[style]{background:#1f1f23!important;color:#f8f9fa}}@media(min-width:640px){body.skin--responsive .mw-parser-output .infobox-table{display:table!important}body.skin--responsive .mw-parser-output .infobox-table>caption{display:table-caption!important}body.skin--responsive .mw-parser-output .infobox-table>tbody{display:table-row-group}body.skin--responsive .mw-parser-output .infobox-table th,body.skin--responsive .mw-parser-output .infobox-table td{padding-left:inherit;padding-right:inherit}}

/* end https://en.wikipedia.org/ */

</style><table class="infobox vevent"><tbody><tr><th colspan="2" class="infobox-above summary">BitLocker</th></tr><tr><td colspan="2" class="infobox-image logo"></td></tr><tr><td colspan="2" class="infobox-image logo"><div class="infobox-caption">Screenshot of the BitLocker Drive Encryption utility</div></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Other names</th><td class="infobox-data">Device Encryption</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Programmer" title="Programmer">Developer(s)</a></th><td class="infobox-data"><a href="Microsoft" title="Microsoft">Microsoft</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Initial release</th><td class="infobox-data">January 30, 2007 (2007-01-30)</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Operating_system" title="Operating system">Operating system</a></th><td class="infobox-data"><a href="Microsoft_Windows" title="Microsoft Windows">Microsoft Windows</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Software_categories#Categorization_approaches" title="Software categories">Type</a></th><td class="infobox-data"><a href="Disk_encryption_software" title="Disk encryption software">Disk encryption software</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Website</th><td class="infobox-data"><a rel="nofollow" class="external text" href="https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/">learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/</a> </td></tr></tbody></table>

BitLocker is a <a href="Full_volume_encryption" class="mw-redirect" title="Full volume encryption">full volume encryption</a> feature included with <a href="Microsoft_Windows" title="Microsoft Windows">Microsoft Windows</a> versions starting with <a href="Windows_Vista" title="Windows Vista">Windows Vista</a>. It is designed to protect data by providing <a href="Encryption" title="Encryption">encryption</a> for entire <a href="Volume_(computing)" title="Volume (computing)">volumes</a>. By default, it uses the <a href="Advanced_Encryption_Standard" title="Advanced Encryption Standard">Advanced Encryption Standard</a> (AES) algorithm in <a href="Cipher_block_chaining" class="mw-redirect" title="Cipher block chaining">cipher block chaining</a> (CBC) or "<a href="Xor%E2%80%93encrypt%E2%80%93xor" title="Xor–encrypt–xor">xor–encrypt–xor</a> (XEX)<a href="Disk_encryption_theory#XEX-based_tweaked-codebook_mode_with_ciphertext_stealing_(XTS)" title="Disk encryption theory">-based tweaked codebook mode with ciphertext stealing</a>" (XTS) mode<a href="#cite_note-Win10New-1">[1]</a> with a 128-<a href="Bit" title="Bit">bit</a> or 256-bit <a href="Key_(cryptography)" title="Key (cryptography)">key</a>.<a href="#cite_note-FAQ-2">[2]</a><a href="#cite_note-AES-CBC-3">[3]</a> CBC is not used over the whole disk; it is applied to each individual <a href="Disk_sector" title="Disk sector">sector</a>.<a href="#cite_note-AES-CBC-3">[3]</a>

<div class="mw-heading mw-heading2"><h2 id="History">History</h2></div>

BitLocker originated as a part of Microsoft's <a href="Next-Generation_Secure_Computing_Base" title="Next-Generation Secure Computing Base">Next-Generation Secure Computing Base</a> architecture in 2004 as a feature tentatively codenamed "Cornerstone"<a href="#cite_note-PdWinHEC20042-4">[4]</a><a href="#cite_note-PDC-Exclusive2-5">[5]</a> and was designed to protect information on devices, particularly if a device was lost or stolen. Another feature, titled "Code Integrity Rooting", was designed to validate the integrity of Microsoft Windows boot and system files.<a href="#cite_note-PdWinHEC20042-4">[4]</a> When used in conjunction with a compatible <a href="Trusted_Platform_Module" title="Trusted Platform Module">Trusted Platform Module</a> (TPM), BitLocker can validate the integrity of boot and system files before decrypting a protected volume; an unsuccessful validation will prohibit access to a protected system.<a href="#cite_note-TechnicalOverview2-6">[6]</a><a href="#cite_note-ExecutiveOverview2-7">[7]</a> BitLocker was briefly called Secure Startup before Windows Vista's <a href="Release_to_manufacturing" class="mw-redirect" title="Release to manufacturing">release to manufacturing</a>.<a href="#cite_note-TechnicalOverview2-6">[6]</a>

BitLocker is available on:

<ul><li><a href="Windows_Vista_editions#Windows_Vista_Enterprise" title="Windows Vista editions">Enterprise</a> and <a href="Windows_Vista_editions#Windows_Vista_Ultimate" title="Windows Vista editions">Ultimate</a> editions of <a href="Windows_Vista" title="Windows Vista">Windows Vista</a> and <a href="Windows_7" title="Windows 7">Windows 7</a></li>

<li>Pro and Enterprise editions of <a href="Windows_8" title="Windows 8">Windows 8</a> and <a href="Windows_8.1" title="Windows 8.1">8.1</a><a href="#cite_note-BitLockerNew-8">[8]</a><a href="#cite_note-FAQ-2">[2]</a></li>

<li>Windows Embedded Standard 7 and Windows Thin PC</li>

<li><a href="Windows_Server_2008" title="Windows Server 2008">Windows Server 2008</a><a href="#cite_note-Server2008-9">[9]</a> and later<a href="#cite_note-Server2008R2-10">[10]</a><a href="#cite_note-BitLockerNew-8">[8]</a></li>

<li>Pro, Enterprise, and Education editions of <a href="Windows_10" title="Windows 10">Windows 10</a><a href="#cite_note-Win10editions-11">[11]</a></li>

<li>Pro, Enterprise, and Education editions of <a href="Windows_11" title="Windows 11">Windows 11</a><a href="#cite_note-Win11editions-12">[12]</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="Features">Features</h2></div>

<table class="infobox vevent"><tbody><tr><th colspan="2" class="infobox-above summary">manage-bde</th></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Programmer" title="Programmer">Developer(s)</a></th><td class="infobox-data"><a href="Microsoft" title="Microsoft">Microsoft</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Initial release</th><td class="infobox-data">January 30, 2007 (2007-01-30)</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Operating_system" title="Operating system">Operating system</a></th><td class="infobox-data"><a href="Microsoft_Windows" title="Microsoft Windows">Microsoft Windows</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Software_categories#Categorization_approaches" title="Software categories">Type</a></th><td class="infobox-data"><a href="Command_(computing)" title="Command (computing)">Command</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Software_license" title="Software license">License</a></th><td class="infobox-data"><a href="Proprietary_software" title="Proprietary software">Proprietary</a> <a href="Commercial_software" title="Commercial software">commercial software</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Website</th><td class="infobox-data"><a rel="nofollow" class="external text" href="https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/manage-bde">manage-bde</a></td></tr></tbody></table>

Initially, the graphical BitLocker interface in Windows Vista could only encrypt the <a href="Operating_system" title="Operating system">operating system</a> volume.<a href="#cite_note-13">[13]</a> Starting with Windows Vista with Service Pack 1 and Windows Server 2008, volumes other than the operating system volume could be encrypted using the graphical tool. Still, some aspects of the BitLocker (such as turning autolocking on or off) had to be managed through a command-line tool called <code>manage-bde.wsf</code>.<a href="#cite_note-14">[14]</a>

The version of BitLocker included in Windows 7 and Windows Server 2008 Release 2 adds the ability to encrypt removable drives. On <a href="Windows_XP" title="Windows XP">Windows XP</a> or Windows Vista, read-only access to these drives can be achieved through a program called BitLocker To Go Reader, if <a href="FAT16" class="mw-redirect" title="FAT16">FAT16</a>, <a href="FAT32" class="mw-redirect" title="FAT32">FAT32</a> or <a href="ExFAT" title="ExFAT">exFAT</a> filesystems are used.<a href="#cite_note-15">[15]</a> In addition, a new command-line tool called <code>manage-bde</code> replaced the old <code>manage-bde.wsf</code>.<a href="#cite_note-16">[16]</a>

Starting with Windows Server 2012 and Windows 8, Microsoft has complemented BitLocker with the Microsoft Encrypted Hard Drive specification, which allows the cryptographic operations of BitLocker encryption to be offloaded to the storage device's hardware, for example, <a href="Self-encrypting_drive" class="mw-redirect" title="Self-encrypting drive">self-encrypting drives</a>.<a href="#cite_note-17">[17]</a><a href="#cite_note-18">[18]</a> In addition, BitLocker can now be managed through <a href="Windows_PowerShell" class="mw-redirect" title="Windows PowerShell">Windows PowerShell</a>.<a href="#cite_note-19">[19]</a> Finally, Windows 8 introduced <a href="Windows_To_Go" title="Windows To Go">Windows To Go</a> in its Enterprise edition, which BitLocker can protect.<a href="#cite_note-20">[20]</a>

<div class="mw-heading mw-heading3"><h3 id="Device_encryption">Device encryption</h3></div>

<a href="Windows_Mobile_6.5" title="Windows Mobile 6.5">Windows Mobile 6.5</a>, <a href="Windows_RT" title="Windows RT">Windows RT</a> and core editions of Windows 8.1 include device encryption, a feature-limited version of BitLocker that encrypts the whole system.<a href="#cite_note-ars-deviceencryption2-21">[21]</a><a href="#cite_note-22">[22]</a><a href="#cite_note-HelpPortal2-23">[23]</a> Logging in with a <a href="Microsoft_account" title="Microsoft account">Microsoft account</a> with administrative privileges automatically begins the encryption process. The recovery key is stored to either the Microsoft account or <a href="Active_Directory" title="Active Directory">Active Directory</a> (Active Directory requires Pro editions of Windows), allowing it to be retrieved from any computer. While device encryption is offered on all editions of Windows 8.1, unlike BitLocker, device encryption requires that the device meet the <a href="InstantGo" title="InstantGo">InstantGo</a> (formerly <a href="Connected_Standby" class="mw-redirect" title="Connected Standby">Connected Standby</a>) specifications,<a href="#cite_note-HelpPortal2-23">[23]</a> which requires <a href="Solid-state_drive" title="Solid-state drive">solid-state drives</a> and a TPM 2.0 chip.<a href="#cite_note-ars-deviceencryption2-21">[21]</a><a href="#cite_note-24">[24]</a>

Starting with Windows 10 1703, the requirements for device encryption have changed, requiring a TPM 1.2 or 2.0 module with PCR 7 support, <a href="UEFI_Secure_Boot" class="mw-redirect" title="UEFI Secure Boot">UEFI Secure Boot</a>, and that the device meets Modern Standby requirements or HSTI validation.<a href="#cite_note-25">[25]</a>

Device encryption requirements were relaxed in Windows 11 24H2, with the Modern Standby, HSTI and Secure Boot compliance no longer required and the DMA interfaces blocklist removed.<a href="#cite_note-26">[26]</a> And device encryption will be enabled by default by clean installation of Windows 11 24H2, called auto device encryption.<a href="#cite_note-27">[27]</a>

In September 2019 a new update was released (KB4516071<a href="#cite_note-28">[28]</a>) changing the default setting for BitLocker when encrypting a self-encrypting drive. Now, the default is to use software encryption for newly encrypted drives. This is due to hardware encryption flaws and security concerns related to those issues.<a href="#cite_note-29">[29]</a>

<div class="mw-heading mw-heading3"><h3 id="Encryption_modes">Encryption modes</h3></div>

Three authentication mechanisms can be used as building blocks to implement BitLocker encryption:<a href="#cite_note-30">[30]</a>

<ul><li>Transparent operation mode: This mode uses the capabilities of TPM 1.2 hardware to provide for transparent user experience—the user powers up and logs into Windows as usual. The key used for <a href="Disk_encryption" title="Disk encryption">disk encryption</a> is sealed (encrypted) by the TPM chip and will only be released to the OS loader code if the early boot files appear to be unmodified. The pre-OS components of BitLocker achieve this by implementing a Static Root of Trust Measurement—a methodology specified by the <a href="Trusted_Computing_Group" title="Trusted Computing Group">Trusted Computing Group</a> (TCG). This mode is vulnerable to a <a href="Cold_boot_attack" title="Cold boot attack">cold boot attack</a>, as it allows a powered-down machine to be <a href="Booting" title="Booting">booted</a> by an attacker. It is also vulnerable to a sniffing attack, as the volume encryption key is transferred in plain text from the TPM to the CPU during a successful boot.</li>

<li>User authentication mode: This mode requires that the user provide some authentication to the pre-boot environment in the form of a pre-boot <a href="Personal_identification_number" title="Personal identification number">PIN</a> or password.</li>

<li>USB Key Mode: The user must insert a USB device that contains a startup key into the computer to be able to boot the protected OS. Note that this mode requires that the BIOS on the protected machine supports the reading of USB devices in the pre-OS environment. BitLocker does not support smart cards for pre-boot authentication.<a href="#cite_note-31">[31]</a></li></ul>

The following combinations of the above authentication mechanisms are supported, all with an optional <a href="Key_escrow" title="Key escrow">escrow</a> recovery key:

<li>Password only<a href="#cite_note-37">[37]</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="Operation">Operation</h2></div>

BitLocker is a <a href="Volume_(computing)" title="Volume (computing)">logical volume</a> encryption system. (A volume spans part of a <a href="Hard_disk_drive" title="Hard disk drive">hard disk drive</a>, the whole drive or more than one drive.) When enabled, TPM and BitLocker can ensure the integrity of the trusted boot path (e.g. BIOS and boot sector), in order to prevent most offline physical attacks and boot sector malware.<a href="#cite_note-Win7FAQ-38">[38]</a>

In order for BitLocker to encrypt the volume holding the operating system, at least two <a href="NTFS" title="NTFS">NTFS</a>-formatted volumes are required: one for the operating system (usually C:) and another with a minimum size of 100 MB, which remains unencrypted and <a href="Booting" title="Booting">boots</a> the operating system.<a href="#cite_note-Win7FAQ-38">[38]</a> (In case of Windows Vista and <a href="Windows_Server_2008" title="Windows Server 2008">Windows Server 2008</a>, however, the volume's minimum size is 1.5 GB and must have a <a href="Drive_letter" class="mw-redirect" title="Drive letter">drive letter</a>.)<a href="#cite_note-39">[39]</a> Unlike previous versions of Windows, Vista's "diskpart" command-line tool includes the ability to shrink the size of an NTFS volume so that this volume may be created from already allocated space. A tool called the BitLocker Drive Preparation Tool is also available from Microsoft that allows an existing volume on Windows Vista to be shrunk to make room for a new boot volume and for the necessary <a href="Bootstrapping_(computing)" class="mw-redirect" title="Bootstrapping (computing)">bootstrapping</a> files to be transferred to it.<a href="#cite_note-40">[40]</a>

Once an alternate boot partition has been created, the TPM module needs to be initialized (assuming that this feature is being used), after which the required disk-encryption key protection mechanisms such as TPM, PIN or <a href="Usb_key" class="mw-redirect" title="Usb key">USB key</a> are configured.<a href="#cite_note-ExamRef-41">[41]</a> The volume is then encrypted as a background task, something that may take a considerable amount of time with a large disk as every logical sector is read, encrypted and rewritten back to disk.<a href="#cite_note-ExamRef-41">[41]</a> The keys are only protected after the whole volume has been encrypted when the volume is considered secure.<a href="#cite_note-42">[42]</a> BitLocker uses a low-level device driver to encrypt and decrypt all file operations, making interaction with the encrypted volume transparent to applications running on the platform.<a href="#cite_note-ExamRef-41">[41]</a>

<a href="Encrypting_File_System" title="Encrypting File System">Encrypting File System</a> (EFS) may be used in conjunction with BitLocker to provide protection once the operating system is running. Protection of the files from processes and users within the operating system can only be performed using encryption software that operates within Windows, such as EFS. BitLocker and EFS, therefore, offer protection against different classes of attacks.<a href="#cite_note-43">[43]</a>

In Active Directory environments, BitLocker supports optional key escrow to Active Directory, although a schema update may be required for this to work (i.e. if the Active Directory Services are hosted on a Windows version previous to Windows Server 2008).

BitLocker and other full disk encryption systems can be attacked by a <a href="Bootkit" class="mw-redirect" title="Bootkit">rogue boot manager</a>. Once the malicious bootloader captures the secret, it can decrypt the Volume Master Key (VMK), which would then allow access to decrypt or modify any information on an encrypted hard disk. By configuring a TPM to protect the trusted boot pathway, including the <a href="BIOS" title="BIOS">BIOS</a> and <a href="Boot_sector" title="Boot sector">boot sector</a>, BitLocker can mitigate this threat. (Note that some non-malicious changes to the boot path may cause a <a href="Trusted_Platform_Module#Platform_integrity" title="Trusted Platform Module">Platform Configuration Register</a> check to fail, and thereby generate a false warning.)<a href="#cite_note-Win7FAQ-38">[38]</a>

<div class="mw-heading mw-heading2"><h2 id="Security_concerns">Security concerns</h2></div>

<div class="mw-heading mw-heading3"><h3 id="TPM_alone_is_not_enough">TPM alone is not enough</h3></div>

The "Transparent operation mode" and "User authentication mode" of BitLocker use TPM hardware to detect whether there are unauthorized changes to the pre-boot environment, including the <a href="BIOS" title="BIOS">BIOS</a> and <a href="Master_boot_record" title="Master boot record">MBR</a>. If any unauthorized changes are detected, BitLocker requests a recovery key on a USB device. This cryptographic secret is used to decrypt the Volume Master Key (VMK) and allow the <a href="Booting" title="Booting">bootup</a> process to continue.<a href="#cite_note-TPM-operation2-44">[44]</a> However, TPM alone is not enough:

<ul><li>In February 2008, a group of security researchers published details of a so-called "<a href="Cold_boot_attack" title="Cold boot attack">cold boot attack</a>" that allows full disk encryption systems such as BitLocker to be compromised by booting the machine from removable media, such as a USB drive, into another operating system, then <a href="Core_dump" title="Core dump">dumping</a> the contents of pre-boot memory.<a href="#cite_note-ColdBoot2-45">[45]</a> The attack relies on the fact that <a href="Dynamic_random-access_memory" title="Dynamic random-access memory">DRAM</a> <a href="Data_remanence" title="Data remanence">retains information</a> for up to several minutes (or even longer, if cooled) after the power has been removed. The <a href="Forensic_disk_controller" title="Forensic disk controller">Bress/Menz device</a>, described in US Patent 9,514,789, can accomplish this type of attack.<a href="#cite_note-46">[46]</a> Similar full disk encryption mechanisms of other vendors and other operating systems, including <a href="Linux" title="Linux">Linux</a> and <a href="MacOS" title="MacOS">Mac OS X</a>, are vulnerable to the same attack. The authors recommend that computers be powered down when not in physical control of the owner (rather than be left in a <a href="Sleep_mode" title="Sleep mode">sleep mode</a>) and that the encryption software be configured to require a password to boot the machine.<a href="#cite_note-ColdBoot2-45">[45]</a></li>

<li>On 10 November 2015, Microsoft released a security update to mitigate a security vulnerability in BitLocker that allowed authentication to be bypassed by employing a malicious <a href="Kerberos_(protocol)" title="Kerberos (protocol)">Kerberos</a> key distribution center, if the attacker had physical access to the machine, the machine was part of a domain and had no PIN or USB flash drive protection.<a href="#cite_note-47">[47]</a></li>

<li>BitLocker still does not properly support TPM 2.0 security features which, as a result, can lead to a complete bypass of privacy protection when keys are transmitted over <a href="Serial_Peripheral_Interface" title="Serial Peripheral Interface">Serial Peripheral Interface</a> in a motherboard.<a href="#cite_note-48">[48]</a></li></ul>

All these attacks require physical access to the system and are thwarted by a secondary protector such as a USB flash drive or PIN code.

<div class="mw-heading mw-heading3"><h3 id="Upholding_Kerckhoffs's_principle">Upholding Kerckhoffs's principle</h3></div>

Although the AES encryption algorithm used in BitLocker is in the <a href="Public_domain" title="Public domain">public domain</a>, its implementation in BitLocker, as well as other components of the software, are <a href="Proprietary_software" title="Proprietary software">proprietary</a>; however, the code is available for scrutiny by Microsoft partners and enterprises, subject to a <a href="Non-disclosure_agreement" title="Non-disclosure agreement">non-disclosure agreement</a>.<a href="#cite_note-49">[49]</a><a href="#cite_note-50">[50]</a>

According to Microsoft sources,<a href="#cite_note-51">[51]</a> BitLocker does not contain an intentionally built-in <a href="Backdoor_(computing)" title="Backdoor (computing)">backdoor</a>, so there is no Microsoft-provided way for <a href="Law_enforcement" title="Law enforcement">law enforcement</a> to have guaranteed access to the data on a user's drive. In 2006, the <a href="Home_Office" title="Home Office">UK Home Office</a> expressed concern over the lack of a backdoor and tried entering into talks with Microsoft to get one introduced.<a href="#cite_note-52">[52]</a> Microsoft developer and cryptographer <a href="Niels_Ferguson" title="Niels Ferguson">Niels Ferguson</a> denied the backdoor request and said, "over my dead body".<a href="#cite_note-:0-53">[53]</a> Microsoft engineers have said that United States <a href="Federal_Bureau_of_Investigation" title="Federal Bureau of Investigation">Federal Bureau of Investigation</a> agents also put pressure on them in numerous meetings to add a backdoor, although no formal, written request was ever made; Microsoft engineers eventually suggested that agents should look for the <a href="Hard_copy" title="Hard copy">hard copy</a> of the <a href="Encryption_key" class="mw-redirect" title="Encryption key">encryption key</a> that the BitLocker program suggests that its users make.<a href="#cite_note-54">[54]</a>

Niels Ferguson's position that "back doors are simply not acceptable"<a href="#cite_note-:0-53">[53]</a> is in accordance with <a href="Kerckhoffs's_principle" title="Kerckhoffs's principle">Kerckhoffs's principle</a>. Stated by Netherlands-born cryptographer <a href="Auguste_Kerckhoffs" title="Auguste Kerckhoffs">Auguste Kerckhoffs</a> in the 19th century, the principle holds that a <a href="Cryptosystem" title="Cryptosystem">cryptosystem</a> should be secure, even if everything about the system, except the encryption key, is public knowledge.

Since 2020, BitLocker's method and data structure is public knowledge due to reverse engineering; the Linux <a href="Cryptsetup" class="mw-redirect" title="Cryptsetup">cryptsetup</a> program is capable of reading and writing BitLocker-protected drives given the key.<a href="#cite_note-55">[55]</a>

<div class="mw-heading mw-heading3"><h3 id="Other_concerns">Other concerns</h3></div>

Starting with Windows 8 and Windows Server 2012, Microsoft removed the Elephant Diffuser from the BitLocker scheme for no declared reason.<a href="#cite_note-56">[56]</a> Dan Rosendorf's research shows that removing the Elephant Diffuser had an "undeniably negative impact" on the security of BitLocker encryption against a targeted attack.<a href="#cite_note-57">[57]</a> Microsoft later cited performance concerns, and noncompliance with the <a href="Federal_Information_Processing_Standards" title="Federal Information Processing Standards">Federal Information Processing Standards</a> (FIPS), to justify the diffuser's removal.<a href="#cite_note-58">[58]</a> Starting with Windows 10 version 1511, however, Microsoft added a new FIPS-compliant <a href="Disk_encryption_theory#XTS" title="Disk encryption theory">XTS-AES</a> encryption algorithm to BitLocker.<a href="#cite_note-Win10New-1">[1]</a> Starting with Windows 10 version 1803, Microsoft added a new feature called "Kernel Direct Memory access (DMA) Protection" to BitLocker, to protect against <a href="DMA_attack" title="DMA attack">DMA attacks</a> via <a href="Thunderbolt_3" class="mw-redirect" title="Thunderbolt 3">Thunderbolt 3</a> ports.<a href="#cite_note-59">[59]</a><a href="#cite_note-60">[60]</a> "Kernel Direct Memory access (DMA) Protection" only protects against attacks through Thunderbolt. Direct Memory Access is also possible through <a href="PCI_Express" title="PCI Express">PCI Express</a>. In this type of attack an attacker would connect a malicious <a href="PCI_Express" title="PCI Express">PCI Express</a> Device,<a href="#cite_note-61">[61]</a> which can in turn write directly to the memory and bypass the Windows login. To protect again this type of attack, Microsoft introduced "Virtualization-based Security".<a href="#cite_note-62">[62]</a><a href="#cite_note-63">[63]</a>

In October 2017, it was reported that a flaw enabled private keys to be inferred from <a href="Public_key_cryptography" class="mw-redirect" title="Public key cryptography">public keys</a>, which could allow an attacker to bypass BitLocker encryption when an affected TPM chip is used.<a href="#cite_note-ars20171016-64">[64]</a> The flaw is the Return of Coppersmith's Attack or <a href="ROCA_vulnerability" title="ROCA vulnerability">ROCA vulnerability</a> which is in a code library developed by <a href="Infineon" class="mw-redirect" title="Infineon">Infineon</a> and had been in widespread use in security products such as <a href="Smartcard" class="mw-redirect" title="Smartcard">smartcards</a> and TPMs. Microsoft released an updated version of the firmware for Infineon TPM chips that fixes the flaw via Windows Update.<a href="#cite_note-65">[65]</a>

<ul><li><a href="Features_new_to_Windows_Vista" title="Features new to Windows Vista">Features new to Windows Vista</a></li>

<li><a href="List_of_Microsoft_Windows_components" title="List of Microsoft Windows components">List of Microsoft Windows components</a></li>

<li><a href="Windows_Vista_I/O_technologies" title="Windows Vista I/O technologies">Windows Vista I/O technologies</a></li>

<li><a href="Next-Generation_Secure_Computing_Base" title="Next-Generation Secure Computing Base">Next-Generation Secure Computing Base</a></li>

<li><a href="FileVault" title="FileVault">FileVault</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist reflist-columns references-column-width" style="column-width: 30em;">

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite id="CITEREFHakala2020" class="citation web cs1">Hakala, Trudy (January 29, 2020). <a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows/whats-new/whats-new-windows-10-version-1507-and-1511">"What's new in Windows 10, versions 1507 and 1511"</a>. <a href="Microsoft_TechNet" title="Microsoft TechNet">TechNet</a>. <a href="Microsoft" title="Microsoft">Microsoft</a>. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-FAQ-2">^ <a href="#cite_ref-FAQ_2-0">a</a> <a href="#cite_ref-FAQ_2-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc766200(v=ws.10)">"Windows BitLocker Drive Encryption Frequently Asked Questions"</a>. TechNet Library. Microsoft. March 22, 2012. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-AES-CBC-3">^ <a href="#cite_ref-AES-CBC_3-0">a</a> <a href="#cite_ref-AES-CBC_3-1">b</a> <cite id="CITEREFFerguson2006" class="citation web cs1">Ferguson, Niels (August 2006). <a rel="nofollow" class="external text" href="https://download.microsoft.com/download/0/2/3/0238acaf-d3bf-4a6d-b3d6-0a0be4bbb36e/BitLockerCipher200608.pdf">"AES-CBC + Elephant Diffuser: A Disk Encryption Algorithm for Windows Vista"</a> (PDF). Microsoft. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-PdWinHEC20042-4">^ <a href="#cite_ref-PdWinHEC20042_4-0">a</a> <a href="#cite_ref-PdWinHEC20042_4-1">b</a> <cite id="CITEREFBiddle2004" class="citation web cs1"><a href="Peter_Biddle" title="Peter Biddle">Biddle, Peter</a> (2004). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20060827073150/https://download.microsoft.com/download/1/8/f/18f8cee2-0b64-41f2-893d-a6f2295b40c8/TW04008_WINHEC2004.ppt">"Next-Generation Secure Computing Base"</a>. <a href="Microsoft" title="Microsoft">Microsoft</a>. Archived from <a rel="nofollow" class="external text" href="https://download.microsoft.com/download/1/8/f/18f8cee2-0b64-41f2-893d-a6f2295b40c8/TW04008_WINHEC2004.ppt">the original</a> (PPT) on August 27, 2006. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-PDC-Exclusive2-5"><a href="#cite_ref-PDC-Exclusive2_5-0">^</a> <cite id="CITEREFThurrott2005" class="citation web cs1">Thurrott, Paul (September 9, 2005). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20150402154123/http://windowsitpro.com/article/windows-server-20082/pre-pdc-exclusive-windows-vista-product-editions-revealed-47665">"Pre-PDC Exclusive: Windows Vista Product Editions"</a>. Supersite for Windows. <a href="Penton_(company)" title="Penton (company)">Penton</a>. Archived from <a rel="nofollow" class="external text" href="https://windowsitpro.com/article/windows-server-20082/pre-pdc-exclusive-windows-vista-product-editions-revealed-47665">the original</a> on April 2, 2015. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-TechnicalOverview2-6">^ <a href="#cite_ref-TechnicalOverview2_6-0">a</a> <a href="#cite_ref-TechnicalOverview2_6-1">b</a> <cite id="CITEREFMicrosoft2005" class="citation web cs1"><a href="Microsoft" title="Microsoft">Microsoft</a> (April 22, 2005). <a rel="nofollow" class="external text" href="https://download.microsoft.com/download/5/D/6/5D6EAF2B-7DDF-476B-93DC-7CF0072878E6/secure-start_tech.doc">"Secure Startup–Full Volume Encryption: Technical Overview"</a> (DOC). Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-ExecutiveOverview2-7"><a href="#cite_ref-ExecutiveOverview2_7-0">^</a> <cite id="CITEREFMicrosoft2005" class="citation web cs1"><a href="Microsoft" title="Microsoft">Microsoft</a> (April 21, 2005). <a rel="nofollow" class="external text" href="https://download.microsoft.com/download/5/D/6/5D6EAF2B-7DDF-476B-93DC-7CF0072878E6/secure-start_exec.doc">"Secure Startup – Full Volume Encryption: Executive Overview"</a> (DOC). Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-BitLockerNew-8">^ <a href="#cite_ref-BitLockerNew_8-0">a</a> <a href="#cite_ref-BitLockerNew_8-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn306081(v=ws.11)?redirectedfrom=MSDN">"What's New in BitLocker"</a>. TechNet Library. <a href="Microsoft" title="Microsoft">Microsoft</a>. August 31, 2016. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-Server2008-9"><a href="#cite_ref-Server2008_9-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20161117004047/https://technet.microsoft.com/en-us/library/cc725719%28v%3Dws.10%29.aspx">"BitLocker Drive Encryption in Windows Vista"</a>. TechNet. Microsoft. Archived from <a rel="nofollow" class="external text" href="https://technet.microsoft.com/en-us/library/cc725719(v=ws.10).aspx">the original</a> on November 17, 2016. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-Server2008R2-10"><a href="#cite_ref-Server2008R2_10-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc732774(v=ws.11)">"BitLocker Drive Encryption Overview"</a>. TechNet. Microsoft. November 17, 2009. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-Win10editions-11"><a href="#cite_ref-Win10editions_11-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.microsoft.com/en-ca/WindowsForBusiness/Compare">"Compare Windows 10 Editions"</a>. Windows for Business. Microsoft. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-Win11editions-12"><a href="#cite_ref-Win11editions_12-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://support.microsoft.com/en-us/windows/finding-your-bitlocker-recovery-key-in-windows-6b71ad27-0b89-ea08-f143-056f5ab347d6">"Finding your BitLocker recovery key in Windows"</a>. Windows support. Microsoft. Retrieved December 2, 2021.</cite>

</li>

<li id="cite_note-13"><a href="#cite_ref-13">^</a> <cite id="CITEREFYegulalp2007" class="citation web cs1">Yegulalp, Serdar (August 7, 2007). <a rel="nofollow" class="external text" href="https://www.computerworld.com/article/1584790/vista-s-bitlocker-encryption-all-it-s-cracked-up-to-be.html">"Vista's BitLocker Encryption"</a>. Computerworld. Retrieved May 15, 2024.</cite>

</li>

<li id="cite_note-14"><a href="#cite_ref-14">^</a> <cite id="CITEREFHynes2016" class="citation web cs1">Hynes, Byron (September 8, 2016). <a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/technet-magazine/cc510321(v=msdn.10)">"Advances in BitLocker Drive Encryption"</a>. TechNet Magazine. Microsoft. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-15"><a href="#cite_ref-15">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20190924171026/https://support.microsoft.com/en-us/help/970401/">"Description of BitLocker To Go Reader"</a>. Microsoft. Archived from <a rel="nofollow" class="external text" href="https://support.microsoft.com/en-us/help/970401/">the original</a> on September 24, 2019. Retrieved April 25, 2017.</cite>

</li>

<li id="cite_note-16"><a href="#cite_ref-16">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-7/dd894351(v=ws.10)">"Enabling BitLocker by Using the Command Line"</a>. <a href="Microsoft_TechNet" title="Microsoft TechNet">TechNet</a>. <a href="Microsoft" title="Microsoft">Microsoft</a>. September 12, 2012. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-17"><a href="#cite_ref-17">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831627(v=ws.11)">"Encrypted Hard Drive"</a>. <a href="Microsoft_TechNet" title="Microsoft TechNet">TechNet</a>. <a href="Microsoft" title="Microsoft">Microsoft</a>. August 31, 2016. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-18"><a href="#cite_ref-18">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/hardware/design/dn653989(v=vs.85)">"Encrypted Hard Drive Device Guide"</a>. <a href="MSDN" class="mw-redirect" title="MSDN">MSDN</a>. <a href="Microsoft" title="Microsoft">Microsoft</a>. June 1, 2017. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-19"><a href="#cite_ref-19">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/powershell/module/bitlocker/?view-winserver2012-ps=&redirectedfrom=MSDN&view=win10-ps">"BitLocker"</a>. <a href="Microsoft_TechNet" title="Microsoft TechNet">TechNet</a>. <a href="Microsoft" title="Microsoft">Microsoft</a>. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-20"><a href="#cite_ref-20">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-8.1-and-8/jj592680(v=ws.11)">"Windows To Go: Frequently Asked Questions"</a>. <a href="Microsoft_TechNet" title="Microsoft TechNet">TechNet</a>. <a href="Microsoft" title="Microsoft">Microsoft</a>. October 23, 2013. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-ars-deviceencryption2-21">^ <a href="#cite_ref-ars-deviceencryption2_21-0">a</a> <a href="#cite_ref-ars-deviceencryption2_21-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/bb964600(v=msdn.10)">"Device Encryption"</a>. Device Encryption. <a href="Microsoft" title="Microsoft">Microsoft</a>. November 18, 2015. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-22"><a href="#cite_ref-22">^</a> <cite id="CITEREFCunningham2013" class="citation web cs1">Cunningham, Andrew (October 17, 2013). <a rel="nofollow" class="external text" href="https://arstechnica.com/information-technology/2013/10/windows-8-1-includes-seamless-automatic-disk-encryption-if-your-pc-supports-it/">"Windows 8.1 includes seamless, automatic disk encryption—if your PC supports it"</a>. <a href="Ars_Technica" title="Ars Technica">Ars Technica</a>. <a href="Cond%C3%A9_Nast" title="Condé Nast">Condé Nast</a>. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-HelpPortal2-23">^ <a href="#cite_ref-HelpPortal2_23-0">a</a> <a href="#cite_ref-HelpPortal2_23-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20160502203117/http://windows.microsoft.com/en-us/windows-8/using-device-encryption">"Help protect your files with device encryption"</a>. Windows Help portal. <a href="Microsoft" title="Microsoft">Microsoft</a>. Archived from <a rel="nofollow" class="external text" href="http://windows.microsoft.com/en-us/windows-8/using-device-encryption">the original</a> on May 2, 2016. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-24"><a href="#cite_ref-24">^</a> <cite id="CITEREFThurrott2013" class="citation web cs1">Thurrott, Paul (June 4, 2013). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20130609041130/http://winsupersite.com/windows-8/blue-device-encryption">"In Blue: Device Encryption"</a>. Paul Thurrott's SuperSite for Windows. <a href="Penton_Media" class="mw-redirect" title="Penton Media">Penton Media</a>. Archived from <a rel="nofollow" class="external text" href="http://winsupersite.com/windows-8/blue-device-encryption">the original</a> on June 9, 2013. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-25"><a href="#cite_ref-25">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-bitlocker">"BitLocker drive encryption in Windows 10 for OEMs"</a>. docs.microsoft.com. November 16, 2018. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-26"><a href="#cite_ref-26">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-bitlocker">"BitLocker drive encryption in Windows 11 for OEMs"</a>. learn.microsoft.com. May 22, 2024. Retrieved October 18, 2024.</cite>

</li>

<li id="cite_note-27"><a href="#cite_ref-27">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.windowslatest.com/2024/05/08/microsoft-confirms-windows-11-24h2-turns-on-device-encryption-by-default/">"Microsoft confirms Windows 11 24H2 turns on Device Encryption by default"</a>. May 8, 2024.</cite>

</li>

<li id="cite_note-28"><a href="#cite_ref-28">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://support.microsoft.com/en-us/help/4516071/windows-10-update-kb4516071">"September 24, 2019—KB4516071 (OS Build 16299.1420)"</a>. support.microsoft.com. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-29"><a href="#cite_ref-29">^</a> <cite id="CITEREFCimpanu2018" class="citation web cs1">Cimpanu, Catalin (November 5, 2018). <a rel="nofollow" class="external text" href="https://www.zdnet.com/article/flaws-in-self-encrypting-ssds-let-attackers-bypass-disk-encryption/">"Flaws in self-encrypting SSDs let attackers bypass disk encryption"</a>. <a href="ZDNet" class="mw-redirect" title="ZDNet">ZDNet</a>. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-30"><a href="#cite_ref-30">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20071023233150/http://www.microsoft.com/technet/security/guidance/clientsecurity/dataencryption/analysis/4e6ce820-fcac-495a-9f23-73d65d846638.mspx">"BitLocker Drive Encryption"</a>. Data Encryption Toolkit for Mobile PCs: Security Analysis. Microsoft. April 4, 2007. Archived from <a rel="nofollow" class="external text" href="https://www.microsoft.com/technet/security/guidance/clientsecurity/dataencryption/analysis/4e6ce820-fcac-495a-9f23-73d65d846638.mspx">the original</a> on October 23, 2007. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-31"><a href="#cite_ref-31">^</a> <cite id="CITEREFDansimp" class="citation web cs1">Dansimp. <a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-using-with-other-programs-faq">"Using BitLocker with other programs FAQ (Windows 10) - Windows security"</a>. docs.microsoft.com. Retrieved July 27, 2022.</cite>

</li>

<li id="cite_note-32"><a href="#cite_ref-32">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows/win32/secprov/protectkeywithtpm-win32-encryptablevolume">"ProtectKeyWithTPM method of the Win32_EncryptableVolume class"</a>. MSDN Library. Microsoft. March 31, 2018. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-33"><a href="#cite_ref-33">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows/win32/secprov/protectkeywithtpmandpin-win32-encryptablevolume?redirectedfrom=MSDN">"ProtectKeyWithTPMAndPIN method of the Win32_EncryptableVolume class"</a>. MSDN Library. Microsoft. March 31, 2018. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-34"><a href="#cite_ref-34">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows/win32/secprov/protectkeywithtpmandpinandstartupkey-win32-encryptablevolume?redirectedfrom=MSDN">"ProtectKeyWithTPMAndPINAndStartupKey method of the Win32_EncryptableVolume class"</a>. MSDN Library. Microsoft. March 31, 2018. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-35"><a href="#cite_ref-35">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows/win32/secprov/protectkeywithtpmandstartupkey-win32-encryptablevolume?redirectedfrom=MSDN">"ProtectKeyWithTPMAndStartupKey method of the Win32_EncryptableVolume class"</a>. MSDN Library. Microsoft. March 31, 2018. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-36"><a href="#cite_ref-36">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows/win32/secprov/protectkeywithexternalkey-win32-encryptablevolume?redirectedfrom=MSDN">"ProtectKeyWithExternalKey method of the Win32_EncryptableVolume class"</a>. MSDN Library. Microsoft. March 31, 2018. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-37"><a href="#cite_ref-37">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows/win32/secprov/protectkeywithnumericalpassword-win32-encryptablevolume?redirectedfrom=MSDN">"ProtectKeyWithNumericalPassword method of the Win32_EncryptableVolume class"</a>. MSDN Library. Microsoft. March 31, 2018. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-Win7FAQ-38">^ <a href="#cite_ref-Win7FAQ_38-0">a</a> <a href="#cite_ref-Win7FAQ_38-1">b</a> <a href="#cite_ref-Win7FAQ_38-2">c</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-7/ee449438(v=ws.10)">"BitLocker Drive Encryption in Windows 7: Frequently Asked Questions"</a>. <a href="Microsoft_TechNet" title="Microsoft TechNet">TechNet</a>. Microsoft. September 12, 2012. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-39"><a href="#cite_ref-39">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc766295(v=ws.10)">"Windows BitLocker Drive Encryption Step-by-Step Guide"</a>. <a href="Microsoft_TechNet" title="Microsoft TechNet">TechNet</a>. <a href="Microsoft" title="Microsoft">Microsoft</a>. July 2, 2012. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-40"><a href="#cite_ref-40">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://support.microsoft.com/en-us/help/933246/description-of-the-bitlocker-drive-preparation-tool">"Description of the BitLocker Drive Preparation Tool"</a>. Microsoft. December 21, 2011. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-ExamRef-41">^ <a href="#cite_ref-ExamRef_41-0">a</a> <a href="#cite_ref-ExamRef_41-1">b</a> <a href="#cite_ref-ExamRef_41-2">c</a> <cite id="CITEREFAndrewHalsey2013" class="citation book cs1">Andrew, Bettany; Halsey, Mike (2013). Exam Ref 70-687: Configuring Windows 8 (1 ed.). Microsoft Press. p. 307. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>978-0-7356-7392-2</bdi>. <a href="OCLC_(identifier)" class="mw-redirect" title="OCLC (identifier)">OCLC</a> <a rel="nofollow" class="external text" href="https://search.worldcat.org/oclc/851209981">851209981</a>.</cite>

</li>

<li id="cite_note-42"><a href="#cite_ref-42">^</a> <cite id="CITEREFJerry2012" class="citation book cs1">Jerry, Honeycutt (2012). Introducing Windows 8: An Overview for IT professionals. Microsoft. p. 121. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>978-0-7356-7050-1</bdi>. <a href="OCLC_(identifier)" class="mw-redirect" title="OCLC (identifier)">OCLC</a> <a rel="nofollow" class="external text" href="https://search.worldcat.org/oclc/819519777">819519777</a>.</cite>

</li>

<li id="cite_note-43"><a href="#cite_ref-43">^</a> <cite id="CITEREFOu2007" class="citation web cs1">Ou, George (February 28, 2007). <a rel="nofollow" class="external text" href="https://www.techrepublic.com/article/prevent-data-theft-with-windows-vistas-encrypted-file-system-efs-and-bitlocker/">"Prevent data theft with Windows Vista's Encrypted File System (EFS) and BitLocker"</a>. <a href="TechRepublic" title="TechRepublic">TechRepublic</a>. <a href="CBS_Interactive" class="mw-redirect" title="CBS Interactive">CBS Interactive</a>. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-TPM-operation2-44"><a href="#cite_ref-TPM-operation2_44-0">^</a> <cite id="CITEREFByron2016" class="citation web cs1">Byron, Hynes (September 7, 2016). <a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/technet-magazine/cc138009(v=msdn.10)">"Keys to Protecting Data with BitLocker Drive Encryption"</a>. TechNet Magazine. Microsoft. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-ColdBoot2-45">^ <a href="#cite_ref-ColdBoot2_45-0">a</a> <a href="#cite_ref-ColdBoot2_45-1">b</a> <cite id="CITEREFHaldermanSchoenHeningerClarkson2008" class="citation thesis cs1">Halderman, J. Alex; <a href="Seth_Schoen" class="mw-redirect" title="Seth Schoen">Schoen, Seth D.</a>; <a href="Nadia_Heninger" title="Nadia Heninger">Heninger, Nadia</a>; Clarkson, William; Paul, William; Calandrino, Joseph A.; Feldman, Ariel J.; Appelbaum, Jacob; <a href="Edward_Felten" title="Edward Felten">Felten, Edward W</a> (February 21, 2008). <a rel="nofollow" class="external text" href="https://www.usenix.org/legacy/event/sec08/tech/full_papers/halderman/halderman.pdf">Lest We Remember: Cold Boot Attacks on Encryption Keys</a> (PDF) (Thesis). <a href="Princeton_University" title="Princeton University">Princeton University</a>. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-46"><a href="#cite_ref-46">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://patents.google.com/patent/US20150006804A1/en">"Systems and methods for safely moving short term memory devices while preserving, protecting and examining their digital data"</a>. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-47"><a href="#cite_ref-47">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://technet.microsoft.com/library/security/MS15-122">"Microsoft Security Bulletin MS15-122 – Important"</a>. Security TechCenter. <a href="Microsoft" title="Microsoft">Microsoft</a>. October 11, 2017. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-48"><a href="#cite_ref-48">^</a> <cite class="citation news cs1"><a rel="nofollow" class="external text" href="https://dolosgroup.io/blog/2021/7/9/from-stolen-laptop-to-inside-the-company-network">"From Stolen Laptop to Inside the Company Network"</a>. Dolos Group. July 28, 2021. Retrieved December 2, 2021.</cite>

</li>

<li id="cite_note-49"><a href="#cite_ref-49">^</a> <cite id="CITEREFThurrott2015" class="citation news cs1">Thurrott, Paul (June 10, 2015). <a rel="nofollow" class="external text" href="https://www.petri.com/no-back-doors-microsoft-opens-windows-source-code-to-eu-governments">"No Back Doors: Microsoft Opens Windows Source Code to EU Governments"</a>. Petri. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-50"><a href="#cite_ref-50">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.microsoft.com/en-us/sharedsource/">"Shared Source Initiative"</a>. www.microsoft.com. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-51"><a href="#cite_ref-51">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/archive/blogs/si_team/back-door-nonsense">"Back-door nonsense"</a>. System Integrity Team Blog. Microsoft. March 2, 2006. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-52"><a href="#cite_ref-52">^</a> <cite id="CITEREFStone-Lee2006" class="citation news cs1">Stone-Lee, Ollie (February 16, 2006). <a rel="nofollow" class="external text" href="http://news.bbc.co.uk/2/hi/uk_news/politics/4713018.stm">"UK holds Microsoft security talks"</a>. <a href="BBC" title="BBC">BBC</a>. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-:0-53">^ <a href="#cite_ref-:0_53-0">a</a> <a href="#cite_ref-:0_53-1">b</a> <cite id="CITEREFEvers2006" class="citation web cs1">Evers, Joris (March 6, 2006). <a rel="nofollow" class="external text" href="https://www.cnet.com/news/microsoft-vista-wont-get-a-backdoor/">"Microsoft: Vista won't get a backdoor"</a>. CNET. CBS Interactive. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-54"><a href="#cite_ref-54">^</a> <cite id="CITEREFFranceschi-Bicchierai2013" class="citation web cs1">Franceschi-Bicchierai, Lorenzo (September 11, 2013). <a rel="nofollow" class="external text" href="https://mashable.com/2013/09/11/fbi-microsoft-bitlocker-backdoor/">"Did the FBI Lean On Microsoft for Access to Its Encryption Software?"</a>. Mashable. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-55"><a href="#cite_ref-55">^</a> <cite id="CITEREFTrefny2020" class="citation conference cs1">Trefny, Vojtech (January 25, 2020). <a rel="nofollow" class="external text" href="https://vtrefny.fedorapeople.org/misc/devconf-bitlocker.pdf">BitLocker disk encryption on Linux</a> (PDF). DevConf CZ.</cite>

</li>

<li id="cite_note-56"><a href="#cite_ref-56">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831713(v=ws.11)">"BitLocker Overview"</a>. technet.microsoft.com. August 31, 2016. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-57"><a href="#cite_ref-57">^</a> <cite id="CITEREFRosendorf2013" class="citation web cs1">Rosendorf, Dan (May 23, 2013). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20211022050105if_/http://spi.unob.cz/presentations/23-May/07-Rosendorf%20The%C2%A0BitLocker%C2%A0Schema.pdf">"Bitlocker: A little about the internals and what changed in Windows 8"</a> (PDF). Archived from <a rel="nofollow" class="external text" href="http://spi.unob.cz/presentations/23-May/07-Rosendorf%20The%C2%A0BitLocker%C2%A0Schema.pdf">the original</a> (PDF) on October 22, 2021. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-58"><a href="#cite_ref-58">^</a> <cite id="CITEREFLee2015" class="citation web cs1">Lee, Micah (June 4, 2015). <a rel="nofollow" class="external text" href="https://theintercept.com/2015/06/04/microsoft-disk-encryption/">"Microsoft Gives Details About Its Controversial Disk Encryption"</a>. The Intercept. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-59"><a href="#cite_ref-59">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://support.microsoft.com/en-us/help/2516445/blocking-the-sbp-2-driver-and-thunderbolt-controllers-to-reduce-1394-d">"Blocking the SBP-2 driver and Thunderbolt controllers to reduce 1394 DMA and Thunderbolt DMA threats to BitLocker"</a>. Microsoft. November 7, 2018. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-60"><a href="#cite_ref-60">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/windows/security/information-protection/kernel-dma-protection-for-thunderbolt">"Kernel DMA Protection for Thunderbolt 3"</a>. Microsoft. March 26, 2019. Retrieved March 16, 2020.</cite>

</li>

<li id="cite_note-61"><a href="#cite_ref-61">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://github.com/ufrisk/pcileech">"PCILeech"</a>. Ulf Frisk. June 6, 2024. Retrieved June 13, 2024.</cite>

</li>

<li id="cite_note-62"><a href="#cite_ref-62">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.vidrasec.com/blog/setup-bitlocker/">"Securing BitLocker: Initial Setup and Defending Against Attacks"</a>. VidraSec. March 15, 2024. Retrieved June 13, 2024.</cite>

</li>

<li id="cite_note-63"><a href="#cite_ref-63">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-vbs">"PCILeech"</a>. Microsoft. March 20, 2023. Retrieved June 13, 2024.</cite>

</li>

<li id="cite_note-ars20171016-64"><a href="#cite_ref-ars20171016_64-0">^</a> <cite id="CITEREFGoodin2017" class="citation web cs1">Goodin, Dan (October 16, 2017). <a rel="nofollow" class="external text" href="https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/">"Millions of high-security crypto keys crippled by newly discovered flaw"</a>. <a href="Ars_Technica" title="Ars Technica">Ars Technica</a>. <a href="Cond%C3%A9_Nast" title="Condé Nast">Condé Nast</a>. Retrieved March 7, 2020.</cite>

</li>

<li id="cite_note-65"><a href="#cite_ref-65">^</a> <cite id="CITEREFBusvine2017" class="citation news cs1">Busvine, Douglas (October 16, 2017). <a rel="nofollow" class="external text" href="https://www.reuters.com/article/us-infineon-cyber/infineon-says-has-fixed-encryption-flaw-found-by-researchers-idUSKBN1CL2KC">"Infineon says has fixed encryption flaw found by researchers"</a>. Reuters. Retrieved March 7, 2020.</cite>

</li>

</ol></div>

<div class="mw-heading mw-heading2"><h2 id="External_links">External links</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .side-box{margin:4px 0;box-sizing:border-box;border:1px solid #aaa;font-size:88%;line-height:1.25em;background-color:var(--background-color-interactive-subtle,#f8f9fa);display:flow-root}.mw-parser-output .infobox .side-box{font-size:100%}.mw-parser-output .side-box-abovebelow,.mw-parser-output .side-box-text{padding:0.25em 0.9em}.mw-parser-output .side-box-image{padding:2px 0 2px 0.9em;text-align:center}.mw-parser-output .side-box-imageright{padding:2px 0.9em 2px 0;text-align:center}@media(min-width:500px){.mw-parser-output .side-box-flex{display:flex;align-items:center}.mw-parser-output .side-box-text{flex:1;min-width:0}}@media(min-width:720px){.mw-parser-output .side-box{width:238px}.mw-parser-output .side-box-right{clear:right;float:right;margin-left:1em}.mw-parser-output .side-box-left{margin-right:1em}}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1237033735">

/* start https://en.wikipedia.org/ */

@media print{body.ns-0 .mw-parser-output .sistersitebox{display:none!important}}@media screen{html.skin-theme-clientpref-night .mw-parser-output .sistersitebox img[src*="Wiktionary-logo-en-v2.svg"]{background-color:white}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .sistersitebox img[src*="Wiktionary-logo-en-v2.svg"]{background-color:white}}

/* end https://en.wikipedia.org/ */

</style><div class="side-box side-box-right sistersitebox"><style data-mw-deduplicate="TemplateStyles:r1126788409">

/* start https://en.wikipedia.org/ */

.mw-parser-output .plainlist ol,.mw-parser-output .plainlist ul{line-height:inherit;list-style:none;margin:0;padding:0}.mw-parser-output .plainlist ol li,.mw-parser-output .plainlist ul li{margin-bottom:0}

/* end https://en.wikipedia.org/ */

</style>

<div class="side-box-text plainlist">Wikibooks has a book on the topic of: <a href="https://en.wikibooks.org/wiki/Guide_to_Windows_Commands" class="extiw external" title="wikibooks:Guide to Windows Commands">Guide to Windows Commands</a></div></div>

</div>

<ul><li><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc732774(v=ws.11)">BitLocker Drive Encryption Technical Overview</a></li>

<li><a rel="nofollow" class="external text" href="https://docs.microsoft.com/en-us/archive/blogs/si_team/">System Integrity Team Blog</a></li></ul>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1236075235">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></div><div role="navigation" class="navbox" aria-labelledby="Microsoft_Windows_components875" style="padding:3px"><table class="nowraplinks hlist mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><style data-mw-deduplicate="TemplateStyles:r1239400231">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div id="Microsoft_Windows_components875" style="font-size:114%;margin:0 4em"><a href="List_of_Microsoft_Windows_components" title="List of Microsoft Windows components">Microsoft Windows components</a></div></th></tr><tr><td class="navbox-abovebelow" colspan="2"><div>

<li>Architecture

<li><a href="Booting_process_of_Windows" title="Booting process of Windows">Booting process</a></li>

<li><a href="List_of_games_included_with_Windows" title="List of games included with Windows">Games</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Management tools</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="App_Installer" title="App Installer">App Installer</a></li>

<li><a href="Cmd.exe" title="Cmd.exe">Command Prompt</a></li>

<li><a href="Control_Panel_(Windows)" title="Control Panel (Windows)">Control Panel</a></li>

<li><a href="Device_Manager" title="Device Manager">Device Manager</a></li>

<li><a href="DirectX_Diagnostic_Tool" title="DirectX Diagnostic Tool">DirectX Diagnostic Tool</a></li>

<li><a href="Disk_Cleanup" title="Disk Cleanup">Disk Cleanup</a></li>

<li><a href="Microsoft_Drive_Optimizer" title="Microsoft Drive Optimizer">Drive Optimizer</a></li>

<li><a href="Driver_Verifier" title="Driver Verifier">Driver Verifier</a></li>

<li><a href="Event_Viewer" title="Event Viewer">Event Viewer</a></li>

<li><a href="IExpress" title="IExpress">IExpress</a></li>

<li><a href="Microsoft_Management_Console" title="Microsoft Management Console">Management Console</a></li>

<li><a href="Netsh" title="Netsh">Netsh</a></li>

<li><a href="Performance_Monitor" title="Performance Monitor">Performance Monitor</a></li>

<li><a href="PowerShell" title="PowerShell">PowerShell</a></li>

<li><a href="Recovery_Console" title="Recovery Console">Recovery Console</a></li>

<li><a href="Resource_Monitor" title="Resource Monitor">Resource Monitor</a></li>

<li><a href="Settings_(Windows)" title="Settings (Windows)">Settings</a></li>

<li><a href="Sysprep" title="Sysprep">Sysprep</a></li>

<li><a href="MSConfig" title="MSConfig">System Configuration</a></li>

<li><a href="System_File_Checker" title="System File Checker">System File Checker</a></li>

<li><a href="System_Information_(Windows)" title="System Information (Windows)">System Information</a></li>

<li><a href="System_Policy_Editor" title="System Policy Editor">System Policy Editor</a></li>

<li><a href="System_Restore" title="System Restore">System Restore</a></li>

<li><a href="Task_Manager_(Windows)" title="Task Manager (Windows)">Task Manager</a></li>

<li><a href="Windows_Error_Reporting" title="Windows Error Reporting">Windows Error Reporting</a></li>

<li><a href="Windows_Ink" title="Windows Ink">Windows Ink</a></li>

<li><a href="Windows_Installer" title="Windows Installer">Windows Installer</a></li>

<li><a href="Windows_Update" title="Windows Update">Windows Update</a>

<ul><li><a href="Windows_Insider" title="Windows Insider">Windows Insider</a></li></ul></li>

<li><a href="Windows_Preinstallation_Environment#Windows_Recovery_Environment" title="Windows Preinstallation Environment">WinRE</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Application_software" title="Application software">Apps</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Microsoft_3D_Viewer" title="Microsoft 3D Viewer">3D Viewer</a></li>

<li><a href="Windows_Calculator" title="Windows Calculator">Calculator</a></li>

<li><a href="Calendar_(Windows)" title="Calendar (Windows)">Calendar</a></li>

<li><a href="Windows_Camera" title="Windows Camera">Camera</a></li>

<li><a href="Character_Map_(Windows)" title="Character Map (Windows)">Character Map</a></li>

<li><a href="City_Art_Search" title="City Art Search">City Art Search</a></li>

<li><a href="Clipchamp" title="Clipchamp">Clipchamp</a></li>

<li><a href="Windows_Clock" title="Windows Clock">Clock</a></li>

<li><a href="Microsoft_Intune" title="Microsoft Intune">Company Portal</a></li>

<li><a href="Microsoft_Copilot" title="Microsoft Copilot">Copilot</a></li>

<li><a href="Feedback_Hub" title="Feedback Hub">Feedback Hub</a></li>

<li><a href="Magnifier_(Windows)" title="Magnifier (Windows)">Magnifier</a></li>

<li><a href="Windows_Media_Player" title="Windows Media Player">Media Player</a>

<li><a href="Microsoft_Messaging" title="Microsoft Messaging">Messaging</a></li>

<li><a href="Windows_Mobility_Center" title="Windows Mobility Center">Mobility Center</a></li>

<li><a href="MSN#MSN_Money_app" title="MSN">Money</a></li>

<li><a href="Microsoft_Movies_%26_TV" title="Microsoft Movies & TV">Movies & TV</a></li>

<li><a href="Narrator_(Windows)" title="Narrator (Windows)">Narrator</a></li>

<li><a href="Windows_Notepad" title="Windows Notepad">Notepad</a></li>

<li><a href="OneDrive" title="OneDrive">OneDrive</a></li>

<li><a href="Microsoft_OneNote" title="Microsoft OneNote">OneNote</a></li>

<li><a href="Microsoft_Paint" title="Microsoft Paint">Paint</a></li>

<li><a href="Microsoft_PC_Manager" title="Microsoft PC Manager">PC Manager</a></li>

<li><a href="People_(Windows)" title="People (Windows)">People</a></li>

<li><a href="Phone_Link" title="Phone Link">Phone Link</a></li>

<li><a href="Photos_(Windows)" title="Photos (Windows)">Photos</a></li>

<li><a href="Quick_Assist" title="Quick Assist">Quick Assist</a></li>

<li><a href="Remote_Desktop_Connection" class="mw-redirect" title="Remote Desktop Connection">Remote Desktop Connection</a></li>

<li><a href="Snipping_Tool" title="Snipping Tool">Snipping Tool</a></li>

<li><a href="Windows_Speech_Recognition" title="Windows Speech Recognition">Speech Recognition</a></li>

<li><a href="Sticky_Notes" title="Sticky Notes">Sticky Notes</a></li>

<li><a href="Microsoft_Store" title="Microsoft Store">Store</a></li>

<li><a href="Windows_Terminal" title="Windows Terminal">Terminal</a></li>

<li><a href="Sound_Recorder_(Windows)" title="Sound Recorder (Windows)">Voice Recorder</a></li>

<li><a href="MSN#MSN_Weather_app" title="MSN">Weather</a></li>

<li><a href="Microsoft_Whiteboard" title="Microsoft Whiteboard">Whiteboard</a></li>

<li><a href="List_of_Remote_Desktop_Protocol_clients#Windows_App" title="List of Remote Desktop Protocol clients">Windows App</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Windows_shell" title="Windows shell">Shell</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Action_Center" title="Action Center">Action Center</a></li>

<li><a href="AutoPlay" title="AutoPlay">AutoPlay</a></li>

<li><a href="AutoRun" title="AutoRun">AutoRun</a></li>

<li><a href="ClearType" title="ClearType">ClearType</a></li>

<li><a href="File_Explorer" title="File Explorer">Explorer</a></li>

<li><a href="Windows_Search" title="Windows Search">Search</a>

<ul><li><a href="IFilter" title="IFilter">IFilter</a></li>

<li><a href="Indexing_Service" title="Indexing Service">Indexing Service</a></li>

<li><a href="Windows_Shell_namespace" title="Windows Shell namespace">Namespace</a></li>

<li><a href="Virtual_folder#Windows" title="Virtual folder">Saved search</a></li>

<li><a href="Special_folder" title="Special folder">Special folder</a></li></ul></li>

<li><a href="Start_menu" title="Start menu">Start menu</a></li>

<li><a href="Taskbar" title="Taskbar">Taskbar</a></li>

<li><a href="Windows_Spotlight" title="Windows Spotlight">Windows Spotlight</a></li>

<li><a href="Windows_XP_visual_styles" title="Windows XP visual styles">Windows XP visual styles</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Windows_service" title="Windows service">Services</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Windows_Error_Reporting" title="Windows Error Reporting">Error Reporting</a></li>

<li><a href="Multimedia_Class_Scheduler_Service" title="Multimedia Class Scheduler Service">Multimedia Class Scheduler</a></li>

<li><a href="Service_Control_Manager" title="Service Control Manager">Service Control Manager</a></li>

<li><a href="Shadow_Copy" title="Shadow Copy">Shadow Copy</a></li>

<li><a href="Windows_Task_Scheduler" title="Windows Task Scheduler">Task Scheduler</a></li>

<li><a href="Wireless_Zero_Configuration" title="Wireless Zero Configuration">Wireless Zero Configuration</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="File_system" title="File system">File systems</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="ExFAT" title="ExFAT">exFAT</a></li>

<li><a href="NTFS_links" title="NTFS links">links</a></li>

<li><a href="NTFS_volume_mount_point" title="NTFS volume mount point">Mount Point</a></li>

<li><a href="NTFS_reparse_point" title="NTFS reparse point">Reparse point</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Server_(computing)" title="Server (computing)">Server</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Active_Directory" title="Active Directory">Active Directory</a></li>

<li><a href="Active_Directory_Rights_Management_Services" title="Active Directory Rights Management Services">Active DRM Services</a></li>

<li><a href="File_Replication_Service" title="File Replication Service">DFS Replication</a></li>

<li><a href="Microsoft_Distributed_Transaction_Coordinator" title="Microsoft Distributed Transaction Coordinator">Distributed Transaction Coordinator</a></li>

<li><a href="Windows_domain" title="Windows domain">Domains</a></li>

<li><a href="Folder_redirection" title="Folder redirection">Folder redirection</a></li>

<li><a href="Group_Policy" title="Group Policy">Group Policy</a></li>

<li><a href="Hyper-V" title="Hyper-V">Hyper-V</a></li>

<li><a href="Network_Access_Protection" title="Network Access Protection">Network Access Protection</a></li>

<li>Print Services for UNIX</li>

<li><a href="Remote_Desktop_Services" title="Remote Desktop Services">Remote Desktop Services</a></li>

<li><a href="Remote_Differential_Compression" title="Remote Differential Compression">Remote Differential Compression</a></li>

<li><a href="Remote_Installation_Services" title="Remote Installation Services">Remote Installation Services</a></li>

<li><a href="Roaming_user_profile" title="Roaming user profile">Roaming user profiles</a></li>

<li><a href="Server_Core" title="Server Core">Server Core</a></li>

<li><a href="SharePoint" title="SharePoint">SharePoint</a></li>

<li><a href="Windows_System_Resource_Manager" title="Windows System Resource Manager">System Resource Manager</a></li>

<li><a href="Windows_Deployment_Services" title="Windows Deployment Services">Windows Deployment Services</a></li>

<li><a href="Windows_Media_Services" title="Windows Media Services">Windows Media Services</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Software_architecture" title="Software architecture">Architecture</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Windows_Boot_Manager" title="Windows Boot Manager">Boot Manager</a></li>

<li><a href="Windows_Console" title="Windows Console">Console</a></li>

<li><a href="Client/Server_Runtime_Subsystem" title="Client/Server Runtime Subsystem">CSRSS</a></li>

<li><a href="Desktop_Window_Manager" title="Desktop Window Manager">Desktop Window Manager</a></li>

<li><a href="Enhanced_Write_Filter" title="Enhanced Write Filter">Enhanced Write Filter</a></li>

<li><a href="Graphics_Device_Interface" title="Graphics Device Interface">Graphics Device Interface</a></li>

<li><a href="Microsoft_Windows_library_files#Hardware_Abstraction_Layer" title="Microsoft Windows library files">Hardware Abstraction Layer</a></li>

<li><a href="I/O_request_packet" title="I/O request packet">I/O request packet</a></li>

<li><a href="Windows_Imaging_Format" title="Windows Imaging Format">Imaging Format</a></li>

<li><a href="Kernel_Transaction_Manager" title="Kernel Transaction Manager">Kernel Transaction Manager</a></li>

<li><a href="Microsoft_Windows_library_files" title="Microsoft Windows library files">Library files</a></li>

<li><a href="Logical_Disk_Manager" title="Logical Disk Manager">Logical Disk Manager</a></li>

<li><a href="Local_Security_Authority_Subsystem_Service" title="Local Security Authority Subsystem Service">LSASS</a></li>

<li><a href="MinWin" title="MinWin">MinWin</a></li>

<li><a href="NTLDR" title="NTLDR">NTLDR</a></li>

<li><a href="Ntoskrnl.exe" title="Ntoskrnl.exe">Ntoskrnl.exe</a></li>

<li><a href="Object_Manager" title="Object Manager">Object Manager</a></li>

<li><a href="Open_XML_Paper_Specification" title="Open XML Paper Specification">Open XML Paper Specification</a></li>

<li><a href="Portable_Executable" title="Portable Executable">Portable Executable</a>

<li><a href="Windows_Registry" title="Windows Registry">Registry</a></li>

<li><a href="Windows_Resource_Protection" title="Windows Resource Protection">Resource Protection</a></li>

<li><a href="Security_Account_Manager" title="Security Account Manager">Security Account Manager</a></li>

<li><a href="Server_Message_Block" title="Server Message Block">Server Message Block</a></li>

<li><a href="Shadow_Copy" title="Shadow Copy">Shadow Copy</a></li>

<li><a href="System_Idle_Process" title="System Idle Process">System Idle Process</a></li>

<li><a href="Winlogon" title="Winlogon">Winlogon</a></li>

<li><a href="WinUSB" title="WinUSB">WinUSB</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Security</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Security_and_Maintenance" title="Security and Maintenance">Security and Maintenance</a></li>

<li><a href="AppLocker" title="AppLocker">AppLocker</a></li>

<li><a href="Credential_Guard" title="Credential Guard">Credential Guard</a></li>

<li><a href="Data_Execution_Prevention" class="mw-redirect" title="Data Execution Prevention">Data Execution Prevention</a></li>

<li><a href="Microsoft_Defender_Antivirus" title="Microsoft Defender Antivirus">Defender</a></li>

<li><a href="Microsoft_family_features" title="Microsoft family features">Family features</a></li>

<li><a href="Kernel_Patch_Protection" title="Kernel Patch Protection">Kernel Patch Protection</a></li>

<li><a href="Mandatory_Integrity_Control" title="Mandatory Integrity Control">Mandatory Integrity Control</a></li>

<li><a href="Protected_Media_Path" title="Protected Media Path">Protected Media Path</a></li>

<li><a href="User_Account_Control" title="User Account Control">User Account Control</a></li>

<li><a href="User_Interface_Privilege_Isolation" title="User Interface Privilege Isolation">User Interface Privilege Isolation</a></li>

<li><a href="Windows_Firewall" title="Windows Firewall">Windows Firewall</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Compatibility</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="COMMAND.COM" title="COMMAND.COM">COMMAND.COM</a></li>

<li><a href="Windows_Subsystem_for_Linux" title="Windows Subsystem for Linux">Windows Subsystem for Linux</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="API" title="API">API</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Active_Scripting" title="Active Scripting">Active Scripting</a>

<ul><li><a href="JScript" title="JScript">JScript</a></li>

<li><a href="VBScript" title="VBScript">VBScript</a></li>

<ul><li><a href="ActiveX" title="ActiveX">ActiveX</a></li>

<li><a href="ActiveX_Document" title="ActiveX Document">ActiveX Document</a></li>

<li><a href="COM_Structured_Storage" title="COM Structured Storage">COM Structured storage</a></li>

<li><a href="OLE_Automation" title="OLE Automation">OLE Automation</a></li>

<li><a href="Microsoft_Transaction_Server" title="Microsoft Transaction Server">Transaction Server</a></li></ul></li>

<li><a href="DirectX" title="DirectX">DirectX</a></li>

<li><a href="Windows_Native_API" title="Windows Native API">Native</a></li>

<li><a href="Universal_Windows_Platform" title="Universal Windows Platform">Universal Windows Platform</a></li>

<li><a href="Windows_API" title="Windows API">WinAPI</a></li>

<li><a href="Windows_Mixed_Reality" title="Windows Mixed Reality">Windows Mixed Reality</a></li>

<li><a href="Windows_Runtime" title="Windows Runtime">Windows Runtime</a></li>

<li><a href="WinUSB" title="WinUSB">WinUSB</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Video_game" title="Video game">Games</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Microsoft_Solitaire_Collection" title="Microsoft Solitaire Collection">Solitaire Collection</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Discontinued</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%">Games</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Full_Tilt!_Pinball#3D_Pinball_for_Windows_–_Space_Cadet" title="Full Tilt! Pinball">3D Pinball</a></li>

<li><a href="Chess_Titans" title="Chess Titans">Chess Titans</a></li>

<li><a href="Microsoft_FreeCell" title="Microsoft FreeCell">FreeCell</a></li>

<li><a href="Microsoft_Hearts" title="Microsoft Hearts">Hearts</a></li>

<li><a href="InkBall" title="InkBall">InkBall</a></li>

<li><a href="Purble_Place" title="Purble Place">Purble Place</a></li>

<li><a href="Microsoft_Solitaire" title="Microsoft Solitaire">Solitaire</a></li>

<li><a href="Microsoft_Spider_Solitaire" title="Microsoft Spider Solitaire">Spider Solitaire</a></li>

<li><a href="Microsoft_Tinker" title="Microsoft Tinker">Tinker</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Apps</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="ActiveMovie" title="ActiveMovie">ActiveMovie</a></li>

<li><a href="Windows_Address_Book" title="Windows Address Book">Address Book</a></li>

<li><a href="Windows_Anytime_Upgrade" title="Windows Anytime Upgrade">Anytime Upgrade</a></li>

<li><a href="Backup_and_Restore" title="Backup and Restore">Backup and Restore</a></li>

<li><a href="Cardfile" title="Cardfile">Cardfile</a></li>

<li><a href="Windows_CardSpace" title="Windows CardSpace">CardSpace</a></li>

<li><a href="CD_Player_(Windows)" title="CD Player (Windows)">CD Player</a></li>

<li><a href="Windows_Contacts" title="Windows Contacts">Contacts</a></li>

<li><a href="Cortana_(virtual_assistant)" title="Cortana (virtual assistant)">Cortana</a></li>

<li><a href="Windows_Desktop_Gadgets" title="Windows Desktop Gadgets">Desktop Gadgets</a></li>

<li><a href="Microsoft_Diagnostics" title="Microsoft Diagnostics">Diagnostics</a></li>

<li><a href="DriveSpace" title="DriveSpace">DriveSpace</a></li>

<li><a href="Windows_DVD_Maker" title="Windows DVD Maker">DVD Maker</a></li>

<li><a href="Windows_Easy_Transfer" title="Windows Easy Transfer">Easy Transfer</a></li>

<li><a href="Microsoft_Edge_Legacy" title="Microsoft Edge Legacy">Edge Legacy</a></li>

<li><a href="MSN_Food_%26_Drink" class="mw-redirect" title="MSN Food & Drink">Food & Drink</a></li>

<li><a href="Groove_Music" title="Groove Music">Groove Music</a></li>

<li><a href="MSN_Health_%26_Fitness" class="mw-redirect" title="MSN Health & Fitness">Health & Fitness</a></li>

<li><a href="Help_and_Support_Center" class="mw-redirect" title="Help and Support Center">Help and Support Center</a></li>

<li><a href="HyperACCESS" title="HyperACCESS">HyperTerminal</a></li>

<li><a href="Imaging_for_Windows" title="Imaging for Windows">Imaging</a></li>

<li><a href="Internet_Explorer" title="Internet Explorer">Internet Explorer</a></li>

<li><a href="Windows_Journal" title="Windows Journal">Journal</a></li>

<li><a href="Make_Compatible" title="Make Compatible">Make Compatible</a></li>

<li><a href="Windows_Media_Center" title="Windows Media Center">Media Center</a></li>

<li><a href="Windows_Meeting_Space" title="Windows Meeting Space">Meeting Space</a></li>

<li><a href="Windows_Messaging" title="Windows Messaging">Messaging</a></li>

<li><a href="Windows_Messenger" title="Windows Messenger">Messenger</a></li>

<li><a href="Windows_Mobile_Device_Center" title="Windows Mobile Device Center">Mobile Device Center</a></li>

<li><a href="Windows_Movie_Maker" title="Windows Movie Maker">Movie Maker</a></li>

<li><a href="Microsoft_NetMeeting" title="Microsoft NetMeeting">NetMeeting</a></li>

<li><a href="NTBackup" title="NTBackup">NTBackup</a></li>

<li><a href="Outlook_Express" title="Outlook Express">Outlook Express</a></li>

<li><a href="Paint_3D" title="Paint 3D">Paint 3D</a></li>

<li><a href="Phone_Companion" title="Phone Companion">Phone Companion</a></li>

<li><a href="Windows_Photo_Gallery" title="Windows Photo Gallery">Photo Gallery</a></li>

<li><a href="Windows_Photo_Viewer" title="Windows Photo Viewer">Photo Viewer</a></li>

<li><a href="Program_Manager" title="Program Manager">Program Manager</a></li>

<li><a href="Skype" title="Skype">Skype</a></li>

<li><a href="MSN#Discontinued_apps" title="MSN">Sports</a></li>

<li><a href="Microsoft_Start" title="Microsoft Start">Start</a></li>

<li><a href="Problem_Steps_Recorder" class="mw-redirect" title="Problem Steps Recorder">Steps Recorder</a></li>

<li><a href="Syskey" title="Syskey">Syskey</a></li>

<li><a href="Travel_(Windows)" class="mw-redirect" title="Travel (Windows)">Travel</a></li>

<li><a href="WinHelp" title="WinHelp">WinHelp</a></li>

<li><a href="WordPad" title="WordPad">WordPad</a></li>

<li><a href="Microsoft_Write" title="Microsoft Write">Write</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Others</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Desktop_Cleanup_Wizard" title="Desktop Cleanup Wizard">Desktop Cleanup Wizard</a></li>

<li><a href="Windows_File_Protection" title="Windows File Protection">File Protection</a></li>

<li><a href="Games_for_Windows" title="Games for Windows">Games for Windows</a></li>

<li><a href="Interix" title="Interix">Interix</a></li>

<li><a href="Media_Control_Interface" title="Media Control Interface">Media Control Interface</a></li>

<li><a href="Next-Generation_Secure_Computing_Base" title="Next-Generation Secure Computing Base">Next-Generation Secure Computing Base</a></li>

<li><a href="Microsoft_POSIX_subsystem" title="Microsoft POSIX subsystem">POSIX subsystem</a></li>

<li><a href="Microsoft_ScanDisk" title="Microsoft ScanDisk">ScanDisk</a></li>

<li><a href="Video_for_Windows" title="Video for Windows">Video for Windows</a></li>

<li><a href="Virtual_DOS_machine" title="Virtual DOS machine">Virtual DOS machine</a></li>

<li><a href="Windows_on_Windows" title="Windows on Windows">Windows on Windows</a></li>

<li><a href="Windows_Services_for_UNIX" title="Windows Services for UNIX">Windows Services for UNIX</a></li>

<li><a href="Windows_SideShow" title="Windows SideShow">Windows SideShow</a></li>

<li><a href="Windows_System_Assessment_Tool" title="Windows System Assessment Tool">Windows System Assessment Tool</a></li>

<li><a href="Windows_To_Go" title="Windows To Go">Windows To Go</a></li>

<li><a href="WinFS" title="WinFS">WinFS</a></li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Spun off to <a href="Microsoft_Store" title="Microsoft Store">Microsoft Store</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="DVD_Player_(Windows)" title="DVD Player (Windows)">DVD Player</a></li>

<li><a href="Windows_File_Manager" title="Windows File Manager">File Manager</a></li>

<li><a href="Hover!" title="Hover!">Hover!</a></li>

<li><a href="Microsoft_Mahjong" title="Microsoft Mahjong">Mahjong</a></li>

<li><a href="Microsoft_Minesweeper" title="Microsoft Minesweeper">Minesweeper</a></li></ul>

</div></td></tr><tr><td class="navbox-abovebelow" colspan="2"><div>

<ul><li> Category</li>

</div></td></tr></tbody></table></div>

<div class="navbox-styles"></div><div role="navigation" class="navbox" aria-labelledby="Windows_command-line_programs_and_shell_builtins413" style="padding:3px"><table class="nowraplinks hlist mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="Windows_command-line_programs_and_shell_builtins413" style="font-size:114%;margin:0 4em"><a href="Microsoft_Windows" title="Microsoft Windows">Windows</a> <a href="Command-line_interface" title="Command-line interface">command-line</a> programs and <a href="Shell_builtin" title="Shell builtin">shell builtins</a></div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">Ecosystem</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Command-line_interpreter" class="mw-redirect" title="Command-line interpreter">Interpreters</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="COMMAND.COM" title="COMMAND.COM">COMMAND.COM</a></li>

<li><a href="Cmd.exe" title="Cmd.exe">Command Prompt</a></li>

<li><a href="PowerShell" title="PowerShell">PowerShell</a></li>

<li><a href="Recovery_Console" title="Recovery Console">Recovery Console</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Terminal_emulator" title="Terminal emulator">Terminals</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Windows_Console" title="Windows Console">Windows Console</a></li>

<li><a href="Windows_Terminal" title="Windows Terminal">Windows Terminal</a></li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">File system navigation</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Cd_(command)" title="Cd (command)">cd</a> (chdir)</li>

<li><a href="Pushd_and_popd" title="Pushd and popd">pushd</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">File management</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="ATTRIB" title="ATTRIB">attrib</a></li>

<li><a href="Cacls" title="Cacls">cacls</a></li>

<li><a href="Encrypting_File_System" title="Encrypting File System">cipher</a></li>

<li><a href="Compact_(computing)" class="mw-redirect" title="Compact (computing)">compact</a></li>

<li><a href="Del_(command)" title="Del (command)">del</a> (erase)</li>

<li><a href="Deltree" class="mw-redirect" title="Deltree">deltree</a></li>

<li><a href="Cacls#icacls" title="Cacls">icacls</a></li>

<li><a href="Mkdir" title="Mkdir">mkdir</a> (md)</li>

<li><a href="Mklink" class="mw-redirect" title="Mklink">mklink</a></li>

<li><a href="Openfiles" class="mw-redirect" title="Openfiles">openfiles</a></li>

<li><a href="Recover_(command)" title="Recover (command)">recover</a></li>

<li><a href="Ren_(command)" title="Ren (command)">ren</a> (rename)</li>

<li><a href="Replace_(command)" title="Replace (command)">replace</a></li>

<li><a href="Rmdir" title="Rmdir">rmdir</a> (rd)</li>

<li><a href="Robocopy" title="Robocopy">robocopy</a></li>

<li><a href="Takeown" class="mw-redirect" title="Takeown">takeown</a></li>

<li><a href="XCOPY" title="XCOPY">xcopy</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Archiving</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Cabinet_(file_format)" title="Cabinet (file format)">expand</a></li>

<li><a href="Cabinet_(file_format)" title="Cabinet (file format)">extrac32</a></li>

<li><a href="Cabinet_(file_format)" title="Cabinet (file format)">extract</a></li>

<li><a href="Cabinet_(file_format)" title="Cabinet (file format)">makecab</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Disk management</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="CHKDSK" title="CHKDSK">chkdsk</a></li>

<li><a href="Convert_(command)" title="Convert (command)">convert</a></li>

<li><a href="Disk_Defragmenter_(Windows)" class="mw-redirect" title="Disk Defragmenter (Windows)">defrag</a></li>

<li><a href="Diskcomp" title="Diskcomp">diskcomp</a></li>

<li><a href="Diskcopy" title="Diskcopy">diskcopy</a></li>

<li><a href="Diskpart" title="Diskpart">diskpart</a></li>

<li><a href="Diskraid" class="mw-redirect" title="Diskraid">diskraid</a></li>

<li><a href="Shadow_Copy" title="Shadow Copy">diskshadow</a></li>

<li><a href="Drvspace" class="mw-redirect" title="Drvspace">drvspace</a></li>

<li><a href="Fdisk" title="Fdisk">fdisk</a></li>

<li><a href="Format_(command)" title="Format (command)">format</a></li>

<li><a href="Fsutil" class="mw-redirect" title="Fsutil">fsutil</a></li>

<li><a href="Label_(command)" title="Label (command)">label</a></li>

<li><a href="MSCDEX" title="MSCDEX">MSCDEX</a></li>

<li><a href="Refsutil" class="mw-redirect" title="Refsutil">refsutil</a></li>

<li><a href="SUBST" title="SUBST">subst</a></li>

<li><a href="Microsoft_ScanDisk" title="Microsoft ScanDisk">scandisk</a></li>

<li><a href="Shadow_Copy" title="Shadow Copy">vssadmin</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Processes</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Runas" title="Runas">runas</a></li>

<li><a href="Windows_Task_Scheduler" title="Windows Task Scheduler">schtasks</a></li>

<li><a href="Shutdown_(computing)" title="Shutdown (computing)">shutdown</a></li>

<li><a href="Start_(command)" title="Start (command)">start</a></li>

<li><a href="Taskkill" class="mw-redirect" title="Taskkill">taskkill</a></li>

<li><a href="Tasklist" title="Tasklist">tasklist</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Registry</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="File_association" title="File association">assoc</a></li>

<li><a href="Ftype" title="Ftype">ftype</a></li>

<li><a href="Windows_Registry#Command_line_editing" title="Windows Registry">regini</a></li>

<li><a href="Regsvr32" title="Regsvr32">regsvr32</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">User environment</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Cmdkey" class="mw-redirect" title="Cmdkey">cmdkey</a></li>

<li><a href="Graftabl" class="mw-redirect" title="Graftabl">graftabl</a></li>

<li><a href="Setver" class="mw-redirect" title="Setver">setver</a></li>

<li><a href="Title_(command)" title="Title (command)">title</a></li>

<li><a href="Where_(command)" class="mw-redirect" title="Where (command)">where</a></li>

<li><a href="Whoami" title="Whoami">whoami</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">File contents</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Edlin" title="Edlin">edlin</a></li>

<li><a href="Findstr" title="Findstr">findstr</a></li>

<li><a href="PRINT_(command)" title="PRINT (command)">print</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Scripting_language" title="Scripting language">Scripting</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Choice_(command)" title="Choice (command)">choice</a></li>

<li><a href="Windows_Script_Host" title="Windows Script Host">cscript</a></li>

<li><a href="DOSKEY" title="DOSKEY">doskey</a></li>

<li><a href="Forfiles" title="Forfiles">forfiles</a></li>

<li><a href="Pause_(command)" class="mw-redirect" title="Pause (command)">pause</a></li>

<li><a href="Command-line_interface#Command_prompt" title="Command-line interface">prompt</a></li>

<li><a href="Timeout_(computing)" title="Timeout (computing)">timeout</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Networking</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Background_Intelligent_Transfer_Service" title="Background Intelligent Transfer Service">bitsadmin</a></li>

<li><a href="MAC_address" title="MAC address">getmac</a></li>

<li><a href="Hostname" title="Hostname">hostname</a></li>

<li><a href="Ipconfig" title="Ipconfig">ipconfig</a></li>

<li><a href="Nbtstat" class="mw-redirect" title="Nbtstat">nbtstat</a></li>

<li><a href="Netsh" title="Netsh">netsh</a></li>

<li><a href="Netstat" title="Netstat">netstat</a></li>

<li><a href="Nslookup" title="Nslookup">nslookup</a></li>

<li><a href="PathPing" title="PathPing">PathPing</a></li>

<li><a href="Rpcping" class="mw-redirect" title="Rpcping">rpcping</a></li>

<li><a href="Route_(command)" title="Route (command)">route</a></li>

<li><a href="Setspn" class="mw-redirect" title="Setspn">setspn</a></li>

<li><a href="Ssh-agent" title="Ssh-agent">ssh-agent</a></li>

<li><a href="Ssh-keygen" title="Ssh-keygen">ssh-keygen</a></li>

<li><a href="OpenSSH" title="OpenSSH">ssh-keyscan</a></li>

<li><a href="Traceroute" title="Traceroute">tracert</a></li>

<li><a href="Windows_Remote_Management" title="Windows Remote Management">winrm</a></li>

<li><a href="Windows_Remote_Management" title="Windows Remote Management">winrs</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Maintenance and care</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Auditpol" class="mw-redirect" title="Auditpol">auditpol</a></li>

<li><a href="Dispdiag" class="mw-redirect" title="Dispdiag">dispdiag</a></li>

<li><a href="Device_Manager#Driverquery_command" title="Device Manager">driverquery</a></li>

<li><a href="Event_Viewer" title="Event Viewer">eventcreate</a></li>

<li><a href="Event_Viewer" title="Event Viewer">eventtriggers</a></li>

<li><a href="Group_Policy" title="Group Policy">gpresult</a></li>

<li><a href="Group_Policy" title="Group Policy">gpupdate</a></li>

<li><a href="Logman" class="mw-redirect" title="Logman">logman</a></li>

<li><a href="Mofcomp" class="mw-redirect" title="Mofcomp">mofcomp</a></li>

<li><a href="Windows_Installer" title="Windows Installer">msiexec</a></li>

<li><a href="NTBackup" title="NTBackup">ntbackup</a></li>

<li><a href="Pentium_FDIV_bug#Software_patches" title="Pentium FDIV bug">pentnt</a></li>

<li><a href="Pnpunattend" class="mw-redirect" title="Pnpunattend">pnpunattend</a></li>

<li><a href="Pnputil" class="mw-redirect" title="Pnputil">pnputil</a></li>

<li><a href="REAgentC" class="mw-redirect" title="REAgentC">REAgentC</a></li>

<li><a href="Relog" class="mw-redirect" title="Relog">relog</a></li>

<li><a href="Sxstrace" class="mw-redirect" title="Sxstrace">sxstrace</a></li>

<li><a href="Systeminfo" class="mw-redirect" title="Systeminfo">systeminfo</a></li>

<li><a href="Tpmtool" class="mw-redirect" title="Tpmtool">tpmtool</a></li>

<li><a href="Tpmvscmgr" class="mw-redirect" title="Tpmvscmgr">tpmvscmgr</a></li>

<li><a href="Tracerpt" class="mw-redirect" title="Tracerpt">tracerpt</a></li>

<li><a href="Typeperf" class="mw-redirect" title="Typeperf">typeperf</a></li>

<li><a href="WBAdmin" title="WBAdmin">WBAdmin</a></li>

<li><a href="Wecutil" class="mw-redirect" title="Wecutil">wecutil</a></li>

<li><a href="Wevtutil" class="mw-redirect" title="Wevtutil">wevtutil</a></li>

<li><a href="Winmgmt" class="mw-redirect" title="Winmgmt">winmgmt</a></li>

<li><a href="Windows_System_Assessment_Tool" title="Windows System Assessment Tool">winsat</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Boot management</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Bcdedit" class="mw-redirect" title="Bcdedit">bcdedit</a></li>

<li><a href="Bootcfg" title="Bootcfg">bootcfg</a></li>

<li><a href="Bootsect" class="mw-redirect" title="Bootsect">bootsect</a></li>

<li><a href="Fixboot" class="mw-redirect" title="Fixboot">fixboot</a></li>

<li><a href="Fixmbr" class="mw-redirect" title="Fixmbr">fixmbr</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Software_development" title="Software development">Software development</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Break_(command)" class="mw-redirect" title="Break (command)">break</a></li>

<li><a href="Debug_(command)" title="Debug (command)">debug</a></li>

<li><a href="QBasic" title="QBasic">QBasic</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Miscellaneous</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Dpath" title="Dpath">dpath</a></li>

</div></td></tr><tr><td class="navbox-abovebelow" colspan="2"><div>

<ul><li><a href="List_of_DOS_commands" title="List of DOS commands">List of DOS commands</a></li>

<li><a href="Environment_variable" title="Environment variable">Environment variables</a></li>

<li><a href="Windows_Support_Tools" title="Windows Support Tools">Windows Support Tools</a></li></ul>

</div></td></tr></tbody></table></div></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2025-04-24" href="https://en.wikipedia.org/wiki/?title=BitLocker&oldid=1287121394">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>