Solved

EFS questions

Posted on 2002-07-22
7
264 Views
Last Modified: 2012-05-04
1. how do i check if 128-bit EFS is enabled on my win 2k prof installation?
2. how does windows EFS compare to IBM's embedded security chip (http://www.pc.ibm.com/ww/resources/security/securitychip.html) in terms of "strength"?

please provide a thorough examination...

thank you!
0
Comment
Question by:loyaliser
7 Comments
 
LVL 63

Accepted Solution

by:
SysExpert earned 200 total points
ID: 7170257
IBM is using hardware RSA, but no details are provided.
I think that this can actually be used in ADDITION to EFS, since IBM's chip is at a low level hardware solution, that should not affect the OS itself.

I hope this helps !
0
 
LVL 1

Author Comment

by:loyaliser
ID: 7170276
SysExpert:

what about question 1?

thank you...
0
 
LVL 22

Expert Comment

by:cookre
ID: 7170372
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS

Value EfsConfiguration
0=enabled
1=disabled
0
Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

 
LVL 1

Author Comment

by:loyaliser
ID: 7170409
cookre:

just checked that key and it is empty... no EfsConfiguration... just

(Default)  REG_SZ  (value not set)
0
 
LVL 22

Expert Comment

by:cookre
ID: 7170517
Without the registry key, I'd run EFSINFO /Y redirected to an output file.  If nothing shows up in the file, I'd presume no EFS.

You can get EFSINFO here:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/efsinfo-o.asp
0
 
LVL 7

Expert Comment

by:franka
ID: 7170646
EFS uses hybrid encryption:

fast symmetric DESX 128 bit for the user data and then a strong public key encryption (asymmetric) of the symmetric key with 512 or 1024 bit (user or admin account)

great documentation from the author of inside windows 2000 book

http://www.winntmag.com/Articles/Print.cfm?ArticleID=5387
http://www.winntmag.com/Articles/Index.cfm?ArticleID=5592

0
 
LVL 1

Author Comment

by:loyaliser
ID: 7175138
that will be fine for now... .thanks others for info, although second part of question was more important.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Server 2008 Server 2003 Server 2000 12 640
Virtualise server 2000 for Hyper V 4 832
Windows 2000 Print Server 2 971
Building AD from Scratch 5 93
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this article, I show you step by step with screenshots to assist you - HOW TO: Deploy and Install the VMware vCenter Server Appliance 6.5 (VCSA 6.5), with some helpful tips along the way.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now