BitLocker Device Encryption

GPTKB entity

Predicate	Object
gptkbp:instanceOf	disk encryption software
gptkbp:canBeDisabled	yes
gptkbp:canBeManagedBy	gptkb:Group_Policy gptkb:Active_Directory gptkb:Microsoft_Intune
gptkbp:commandLineTool	gptkb:PowerShell manage-bde
gptkbp:compatibleWith	gptkb:Windows_10_S gptkb:Windows_7_Starter gptkb:Windows_7_Home_Basic gptkb:Windows_7_Home_Premium
gptkbp:defaultIn	Windows Home editions (on supported hardware) Windows Pro editions (on supported hardware)
gptkbp:developedBy	gptkb:Microsoft
gptkbp:encryption	system drive fixed data drives removable drives (with BitLocker To Go)
gptkbp:encryptionMode	gptkb:XTS-AES gptkb:CBC
https://www.w3.org/2000/01/rdf-schema#label	BitLocker Device Encryption
gptkbp:interface	gptkb:Control_Panel gptkb:Settings_app
gptkbp:introducedIn	gptkb:Windows_Vista
gptkbp:license	gptkb:Windows_Education gptkb:Windows_Enterprise gptkb:Windows_Pro
gptkbp:partOf	gptkb:Microsoft_Windows
gptkbp:protectedBy	data at rest
gptkbp:reasonForSuspension	yes
gptkbp:recoveryMethod	recovery key recovery password
gptkbp:requires	UEFI firmware TPM 1.2 or later
gptkbp:supports	PIN authentication TPM USB key authentication hardware encryption (on supported drives)
gptkbp:supportsAlgorithm	gptkb:AES
gptkbp:website	https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview
gptkbp:bfsParent	gptkb:Windows_11_Home
gptkbp:bfsLayer	7