Solved

EFS questions

Posted on 2002-07-22
7
270 Views
Last Modified: 2012-05-04
1. how do i check if 128-bit EFS is enabled on my win 2k prof installation?
2. how does windows EFS compare to IBM's embedded security chip (http://www.pc.ibm.com/ww/resources/security/securitychip.html) in terms of "strength"?

please provide a thorough examination...

thank you!
0
Comment
Question by:loyaliser
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 63

Accepted Solution

by:
SysExpert earned 200 total points
ID: 7170257
IBM is using hardware RSA, but no details are provided.
I think that this can actually be used in ADDITION to EFS, since IBM's chip is at a low level hardware solution, that should not affect the OS itself.

I hope this helps !
0
 
LVL 1

Author Comment

by:loyaliser
ID: 7170276
SysExpert:

what about question 1?

thank you...
0
 
LVL 22

Expert Comment

by:cookre
ID: 7170372
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS

Value EfsConfiguration
0=enabled
1=disabled
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 
LVL 1

Author Comment

by:loyaliser
ID: 7170409
cookre:

just checked that key and it is empty... no EfsConfiguration... just

(Default)  REG_SZ  (value not set)
0
 
LVL 22

Expert Comment

by:cookre
ID: 7170517
Without the registry key, I'd run EFSINFO /Y redirected to an output file.  If nothing shows up in the file, I'd presume no EFS.

You can get EFSINFO here:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/efsinfo-o.asp
0
 
LVL 7

Expert Comment

by:franka
ID: 7170646
EFS uses hybrid encryption:

fast symmetric DESX 128 bit for the user data and then a strong public key encryption (asymmetric) of the symmetric key with 512 or 1024 bit (user or admin account)

great documentation from the author of inside windows 2000 book

http://www.winntmag.com/Articles/Print.cfm?ArticleID=5387
http://www.winntmag.com/Articles/Index.cfm?ArticleID=5592

0
 
LVL 1

Author Comment

by:loyaliser
ID: 7175138
that will be fine for now... .thanks others for info, although second part of question was more important.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
While it may be true that the internet is a place of possibilities, it is also a hostile environment lurking with many dangers. By clicking on the wrong link, trusting the wrong person or using a weak password, you are virtually inviting hackers to …
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question