asked on

EFS questions

1. how do i check if 128-bit EFS is enabled on my win 2k prof installation?
2. how does windows EFS compare to IBM's embedded security chip (http://www.pc.ibm.com/ww/resources/security/securitychip.html) in terms of "strength"?

please provide a thorough examination...

thank you!

ASKER CERTIFIED SOLUTION

SysExpert

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

loyaliser

ASKER

SysExpert:

what about question 1?

thank you...

cookre

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS

Value EfsConfiguration
0=enabled
1=disabled

loyaliser

ASKER

cookre:

just checked that key and it is empty... no EfsConfiguration... just

(Default) REG_SZ (value not set)

cookre

Without the registry key, I'd run EFSINFO /Y redirected to an output file. If nothing shows up in the file, I'd presume no EFS.

You can get EFSINFO here:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/efsinfo-o.asp

Falco Bethke

EFS uses hybrid encryption:

fast symmetric DESX 128 bit for the user data and then a strong public key encryption (asymmetric) of the symmetric key with 512 or 1024 bit (user or admin account)

great documentation from the author of inside windows 2000 book

http://www.winntmag.com/Articles/Print.cfm?ArticleID=5387
http://www.winntmag.com/Articles/Index.cfm?ArticleID=5592

loyaliser

ASKER

that will be fine for now... .thanks others for info, although second part of question was more important.