EFS questions

1. how do i check if 128-bit EFS is enabled on my win 2k prof installation?
2. how does windows EFS compare to IBM's embedded security chip (http://www.pc.ibm.com/ww/resources/security/securitychip.html) in terms of "strength"?

please provide a thorough examination...

thank you!
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

IBM is using hardware RSA, but no details are provided.
I think that this can actually be used in ADDITION to EFS, since IBM's chip is at a low level hardware solution, that should not affect the OS itself.

I hope this helps !

Experts Exchange Solution brought to you by ConnectWise

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
loyaliserAuthor Commented:

what about question 1?

thank you...
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS

Value EfsConfiguration
Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

loyaliserAuthor Commented:

just checked that key and it is empty... no EfsConfiguration... just

(Default)  REG_SZ  (value not set)
Without the registry key, I'd run EFSINFO /Y redirected to an output file.  If nothing shows up in the file, I'd presume no EFS.

You can get EFSINFO here:
EFS uses hybrid encryption:

fast symmetric DESX 128 bit for the user data and then a strong public key encryption (asymmetric) of the symmetric key with 512 or 1024 bit (user or admin account)

great documentation from the author of inside windows 2000 book


loyaliserAuthor Commented:
that will be fine for now... .thanks others for info, although second part of question was more important.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.