EFS questions

1. how do i check if 128-bit EFS is enabled on my win 2k prof installation?
2. how does windows EFS compare to IBM's embedded security chip (http://www.pc.ibm.com/ww/resources/security/securitychip.html) in terms of "strength"?

please provide a thorough examination...

thank you!
LVL 1
loyaliserAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
SysExpertConnect With a Mentor Commented:
IBM is using hardware RSA, but no details are provided.
I think that this can actually be used in ADDITION to EFS, since IBM's chip is at a low level hardware solution, that should not affect the OS itself.

I hope this helps !
0
 
loyaliserAuthor Commented:
SysExpert:

what about question 1?

thank you...
0
 
cookreCommented:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS

Value EfsConfiguration
0=enabled
1=disabled
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
loyaliserAuthor Commented:
cookre:

just checked that key and it is empty... no EfsConfiguration... just

(Default)  REG_SZ  (value not set)
0
 
cookreCommented:
Without the registry key, I'd run EFSINFO /Y redirected to an output file.  If nothing shows up in the file, I'd presume no EFS.

You can get EFSINFO here:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/efsinfo-o.asp
0
 
frankaCommented:
EFS uses hybrid encryption:

fast symmetric DESX 128 bit for the user data and then a strong public key encryption (asymmetric) of the symmetric key with 512 or 1024 bit (user or admin account)

great documentation from the author of inside windows 2000 book

http://www.winntmag.com/Articles/Print.cfm?ArticleID=5387
http://www.winntmag.com/Articles/Index.cfm?ArticleID=5592

0
 
loyaliserAuthor Commented:
that will be fine for now... .thanks others for info, although second part of question was more important.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.