BitLocker (Windows 10 and later)

GPTKB entity

Predicate	Object
gptkbp:instanceOf	full disk encryption feature
gptkbp:BitLockerToGo	removable drive encryption
gptkbp:canBeManagedBy	gptkb:Group_Policy gptkb:Active_Directory gptkb:Microsoft_Endpoint_Manager
gptkbp:category	gptkb:Windows_10 data protection Windows security disk encryption
gptkbp:compatibleWith	gptkb:FIPS_140-2
gptkbp:defaultEncryptionMethod	XTS-AES 128-bit XTS-AES 256-bit
gptkbp:developedBy	gptkb:Microsoft
gptkbp:documentation	https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview
gptkbp:encryptionMode	gptkb:XTS-AES gptkb:CBC
gptkbp:feature	gptkb:BitLocker_To_Go pre-boot authentication hardware encryption support network unlock auto-unlock
https://www.w3.org/2000/01/rdf-schema#label	BitLocker (Windows 10 and later)
gptkbp:introducedIn	gptkb:Windows_Vista
gptkbp:key	password TPM USB key
gptkbp:keyRecovery	recovery key recovery password
gptkbp:managementInterface	gptkb:BitLocker_Drive_Encryption_Control_Panel gptkb:manage-bde_command_line_tool gptkb:PowerShell_cmdlets
gptkbp:operatingSystem	gptkb:Windows_10 gptkb:Windows_11
gptkbp:protectedBy	fixed data drives removable data drives operating system drive
gptkbp:requires	gptkb:Windows_Pro,_Enterprise,_or_Education_edition NTFS file system for OS drive
gptkbp:supports	multi-factor authentication secure boot modern standby silent encryption
gptkbp:supportsAlgorithm	gptkb:AES
gptkbp:vulnerableTo	cold boot attack DMA attack
gptkbp:bfsParent	gptkb:XTS-AES_(Windows_10_and_later)
gptkbp:bfsLayer	8