Windows 8.1 Pro Bitlocker AES 256-bit cypher question

Hi, all
Have an odd situation I cannot make any sense of. I have a desktop PC running Windows 8.1 Pro. I launched gpedit.msc and changed Bitlocker’s cypher strength from the default AES 128-bit to AES 256-bit.
I then connected a brand new Western Digital 4TB external drive (model WDBFJK0040HBK-04) to the PC via USB 3.0, and Bitlocker-encrypted the drive. Opened a command prompt window as administrator, ran “manage-bde –status” for the drive in question,
which indicated the drive was encrypted with the 128 bit cypher strength, instead of 256 bits, as I had selected. Have unencrypted, rebooted and re-encrypted the drive time and again, always with the same results.
When connecting the same external 4TB drive to a Windows Server 2012 R2 Essentials in which I had made the exact same changes via gpedit.msc,
I can encrypt it with the 256-bit cypher strength, with no problems.
No TPM is used in either scenario, just a passphrase.
Anyone has any idea why my 256-bit setting is being ignored in the Windows 8.1 Pro machine?
Thanks
Arsene
ArseneL

Well, running rsop.msc in my Server 2012 R2 machine does show my 256-bit bitlocker setting took, however, running rsop.msc in my Win 8.1 Pro machine shows it did not, which explains the problem I am having.
Now all I have to do is find out why my request is not taking, even though I am logged in as an admin.
Thanks!!
ArseneL

Similar Messages

Help enabling AES 256-bit cipher suites

I can't seem to create an SSLServerSocket with the 2 AES 256-bit cipher suites that are supposed to be available in JDK1.4.2. As you can see in the following code, the SSLServerSocket, ss, is enabled with the 2 AES_256 cipher suites. But, when ss.getEnabledCipherSuites() is invoked, those 2 suites aren't listed. What's up?
Also, what is this SSLv2Hello that I can't seem to get rid of?
    String[] PROTOCOLS = {"SSLv3", "TLSv1"};
    String[] CIPHER_SUITES = {"TLS_DHE_RSA_WITH_AES_256_CBC_SHA",
                              "TLS_DHE_RSA_WITH_AES_128_CBC_SHA",
                              "SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
                              "TLS_RSA_WITH_AES_256_CBC_SHA",
                              "TLS_RSA_WITH_AES_128_CBC_SHA",
                              "SSL_RSA_WITH_3DES_EDE_CBC_SHA"};// create an SSLServerSocket ss
        SSLContext context = SSLContext.getInstance("TLS", "SunJSSE");
        context.init(myKeyManagers, myTrustManagers, SecureRandom.getInstance("SHA1PRNG", "SUN"));
        SSLServerSocketFactory ssFactory = context.getServerSocketFactory();
        SSLServerSocket ss = ssFactory.createServerSocket();
        ss.setEnabledProtocols(PROTOCOLS);
        ss.setEnabledCipherSuites(CIPHER_SUITES);// output a bunch of useful debugging information
        System.out.println(System.getProperty("java.version") + "\n");
        Provider[] providers = Security.getProviders();
        for(int i=0; i < providers.length; ++i)
            System.out.println(providers[i] + "\n" + providers.getInfo() + "\n********************");
String[] enabledProtocols = ss.getEnabledProtocols();
for(int i=0; i < enabledProtocols.length; ++i)
System.out.println(enabledProtocols[i]);
String[] enabledCipherSuites = ss.getEnabledCipherSuites();
for(int i=0; i < enabledCipherSuites.length; ++i)
System.out.println(enabledCipherSuites[i]);
OUTPUT
1.4.2
SUN version 1.42
SUN (DSA key/parameter generation; DSA signing; SHA-1, MD5 digests; SecureRandom; X.509 certificates; JKS keystore; PKIX CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores)
SunJSSE version 1.42
Sun JSSE provider(implements RSA Signatures, PKCS12, SunX509 key/trust factories, SSLv3, TLSv1)
SunRsaSign version 1.42
SUN's provider for RSA signatures
SunJCE version 1.42
SunJCE Provider (implements DES, Triple DES, AES, Blowfish, PBE, Diffie-Hellman, HMAC-MD5, HMAC-SHA1)
SunJGSS version 1.0
Sun (Kerberos v5)
SSLv2Hello
SSLv3
TLSv1
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA

Now I get an Exception when I run the same program.
OUTPUT
1.4.2
SUN version 1.42
SUN (DSA key/parameter generation; DSA signing; SHA-1, MD5 digests; SecureRandom; X.509 certificates; JKS keystore; PKIX CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores)
SunJSSE version 1.42
Sun JSSE provider(implements RSA Signatures, PKCS12, SunX509 key/trust factories, SSLv3, TLSv1)
SunRsaSign version 1.42
SUN's provider for RSA signatures
SunJCE version 1.42
SunJCE Provider (implements DES, Triple DES, AES, Blowfish, PBE, Diffie-Hellman, HMAC-MD5, HMAC-SHA1)
SunJGSS version 1.0
Sun (Kerberos v5)
java.lang.IllegalArgumentException: Cannot support TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
        at com.sun.net.ssl.internal.ssl.CipherSuiteList.<init>(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.setEnabledCipherSuites(DashoA6275)
        at test.util.ConcreteSSLServerSocketFactory.initSocket(ConcreteSSLServerSocketFactory.java:111)
        at test.util.ConcreteSSLServerSocketFactory.createServerSocket(ConcreteSSLServerSocketFactory.java:100)
        at test.Test.main(Test.java:111)
Exception in thread "main"

AIR-AP1131AG-I-K9 support AES 256 bit ?

hi,
I have several AP devices:
Product/Model Number: AIR-AP1131AG-I-K9
System Software Filename: c1130-k9w7-tar.124-3g.JA
System Software Version: 12.4(3g)JA
Bootloader Version: 12.3(8)JEA
i need to know if AES 256 bit is supported by this devices and if the current software need to upgrade for that.
Regards,

HI Ben,
As per my knowledge this Software dont support 256 bit key size.
Here is the link:http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-4_3g_JA/configuration/guide/ios1243gjaconfigguide/s43wep.html
another version: 12.3(8)JA supports 256 bit key size to protect data traffic,
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-3_8_JA/configuration/guide/1238jasc/s38wep.html
Regards
Don't forget to rate helpful posts

Generating AES 256 bit key using seed

Hi
As part of encryption requirements for encrypting the body of the SOAP Message while calling an external Web Service, it is requried to encrypt using a shared symmetric key.
First step is to create a password digest
Base64(sha1(nonce + createdTimestamp + password)) - This step is working completely fine and produces a 160 bit Hash
The next step is to generate an AES 256 bit key using the above hash as the Seed. This should generate a 256 bit encrytpion key which can then be used to encrypt the message body.
Would appreciate if anyone who knows how to generate AES 256 bit key using a hash seed in Java (v1.4.2) can provide some guidance.
P:S. I am using WSS4J API to use WS-Security

I have to generate 256-bit AES key with a 128-bit IV using the above password digest and the IV used for in the creation of the AES key prefixes the cipher text.
The external WebService is .net webservice.
Edited by: GUPTAG on Nov 25, 2008 3:05 AM

CF9 Encrypt with AES 256-bit, example anyone?

Hi there. I'm looking for a working example of the Encrypt method using the AES 256 bit key. I think that I have the Unlimited Strength Jurisdiction Policy Files enabled. And I'm still getting the CFError,
The key specified is not a valid key for this encryption: Illegal key size.
Now i hit the wall, can't get it. What wrong am i doing? How can I verify that the policy files are installed and accessible to my cf file? Any help is greatly appreciated.
<cfset thePlainText = "Is this working for me?" />
Generate Secret Key (128):  <cfset AES128 = "#generatesecretkey('AES',128)#" /> <cfdump var="#AES128#"><BR>
Generate Secret Key (192):  <cfset AES192 = "#generatesecretkey('AES',192)#" /> <cfdump var="#AES192#"><BR>
Generate Secret Key (256):  <cfset AES256 = "#generatesecretkey('AES',256)#" /> <cfdump var="#AES256#"><BR><BR>
<cfset theKey    = AES256 />
<cfset theAlgorithm = "AES/CBC/PKCS5Padding" />
<cfset theEncoding = "base64" />
<cfset theIV    = BinaryDecode("6d795465737449566f7253616c7431323538704c6173745f", "hex") />
<cfset encryptedString = encrypt(thePlainText, theKey, theAlgorithm, theEncoding, theIV) />

<cfset keyLengthInBits = arrayLen(BinaryDecode(theKey, "base64")) * 8 />
<cfset ivLengthInBits = arrayLen(theIV) * 8 />
<cfdump var="#variables#" label="AES/CBC/PKCS5Padding Results" />
<cfabort>

Verison 10 is different from 9 because they run on different servlet containers. CF 10 uses Tomcat, CF 9 uses JRun, so things are in different places.
\\ColdFusion10\jre\lib\security seems like the correct locaiton for the policy files to me. I actually gave you the wrong locations in my original post (sorry about that). According to the installation instructions they belong in <java-home>\lib\security, which is looks like you've found.
So something else is wrong. Here are some things to look at, in no particular order:
1. Are you using a JVM other than the Java 1.6 that comes with CF10?
2. Did you restart Tomcat after coping the files in?
3. Note that I keep saying FILES, did you copy BOTH of th .jar files from the JCE folder you unzipped into the security directory. It should have prompted you to overwrite existing files.
4. Did you try unzipping the files and copying them in again, on the chance that they did not overwrite the originals?
Sorry, I don't have CF10 installed to give this a try. But I have no reason to believe that it would not work in 10. It's all just JCA/JCE on the underlying JAVA, and I have heard no reports from anyone else that it doesn't work.
Jason

Windows 8.1 Pro Bitlocker with HP Envy 700

I just got a new HP Envy 700-249. I upgraded to Windows 8.1 Pro immediately for Bitlocker and Remote Access. The PC will be stored in a relatively unsecure location and is for public use - but will have a few users who have access to install software, store private files, etc. SO I want to be sure that the OS stays safe as well as the data.
I want a way to keep someone from accessing anything on C drive that isn't in the Public folders and make the drive unable to be viewed if booted from anything other than itself. So I figured BitLocker. I've gone into gpedit.msc and set option to allow bitlocker without TPM. BitLocker runs and allows me to turn on encryption. I've tried a couple of types of USB drives and BitLocker says it has saved the key to them. I've checked and they have a BitLocker recovery file on them.
BUT - when the system reboots, it will not recognize the USB drive as the key and will not encrypt the drive. I am stumped.
Has anyone gotten an HP non-TPM desktop to encrypt the OS and data drives with Win 8.1 Bitlocker? How?????

Hi,
Bit locker was meant to encrypt entire physical drives. Review this MS article.
I would suggest that you install a second hard drive and then move your sensitive files and documents to that physical hard drive and use bit locker to encrypt that hard drive. If you are going to keep the key on an external device (USB flash drive) then make a backup copy in case the USB drive fails or is lost.
HP DV9700, t9300, Nvidia 8600, 4GB, Crucial C300 128GB SSD
HP Photosmart Premium C309G, HP Photosmart 6520
HP Touchpad, HP Chromebook 11
Custom i7-4770k,Z-87, 8GB, Vertex 3 SSD, Samsung EVO SSD, Corsair HX650,GTX 760
Custom i7-4790k,Z-97, 16GB, Vertex 3 SSD, Plextor M.2 SSD, Samsung EVO SSD, Corsair HX650, GTX 660TI
Windows 7/8 UEFI/Legacy mode, MBR/GPT

I'm begging for help, Windows 8.1 Pro Bitlocker, a Crucial M500, and T420...

I have a Lenovo T420-4177 and a Crucial M500 self-encrypting drive, Win 8.1 Pro. I have made sure that the BIOS is up to date, that TPM is turned on and verified it is v1.2 AND initialized, the BIOS is set to boot ONLY to UEFI OS (i.e. CSM is disabled), BitLocker is configured in Local Group Policy to use hardware encryption. Why is it then that when I try to use BitLocker that it will only use software encryption??? Google has been less than cooperative in providing me clear "how-to check UEFI version" results.
Here's my post on Crucial's forum:
http://forum.crucial.com/t5/Solid-State-Drives-SSD/Windows-8-doesn-t-use-hardware-encryption-with-M5...
Here's a related post:
http://forum.crucial.com/t5/Solid-State-Drives-SSD/Cannot-enable-hardware-Bitlocker-Encryption-on-M5...
I've also checked these articles:
http://technet.microsoft.com/en-us/library/hh831627.aspx
http://www.anandtech.com/show/6891/hardware-accelerated-bitlocker-encryption-microsoft-windows-8-edr...
http://forum.crucial.com/t5/Solid-State-Drives-SSD-Knowledge/System-Requirements-for-M500-Hardware-E...

T420 does not support UEFI 2.3.1

About Hardware encryption AES 256 bit crucial mx100

My question works it automatically or works the hardware encryption windows only ?
because not sure is it safe enough and also about speed.
sorry for my terrible English. You can answer in German and English thanks.
Meine Frage ist ... ob die Hardware Verschlüsselung automatisch vom Controller crucial mx100 gesteuert wird oder funktioniert es nur unter Windows ?
es muss ich filevault benutzen um die Daten zu schützen ?

Hardware encryption is a feature of SSD's. It is transparent to the user and you don't have to do anything to enable it. The data on the SSD is encrypted with a random key. When you erase the device, the key is destroyed. You can't use hardware encryption to protect your data from theft. For that, use FileVault.

Final cut pro millions of colours + bit depth question

Hello
I am working in final cut pro 7 and I wanted to know what is the maximum bit depth I can export using the Prores codec? All I see in compression settings for rendering my timeline when wanting to render with Prores 4444 is the option for 'millions of colors' and 'millions of colors +' I was under the impression that millions of colors refered to 8 bit... does the alpha channel mean I can get 10 bit? can the alpha channel hold 2 more bits per channel or something? Or is there no way I can export a 10bit file using the Prores codec within fcp7..? is it all just 8bit. -and when I select 422HQ there is no advanced options for millions of colors..what does this mean? is the only way to get 10bit out of fcp7 to render with the 10bit uncompressed codec? and if so can I render the timeline in prores while im working with it then delete all the renders and change the render codec to 10bit uncompressed, will this now be properly giving me 10bit from the original 4444 12 bit files i imported in the beginning..?
Any help is much appreciated

ProRes is 10-bit. Every ProRes codec is 10-bit...LT, 422, HQ. Not one of them is 8-bit. Except for ProRes 444...that's 12 bit.

Aes-256 or aes-128 bit

Hello
I'm trying to keep the CPU down as much as possible on my ASA-5540. We're running 8.2.5 on it. We have a bout 80 active IPSec tunnels so far, all which are using AES-256 bit for phase1/2, 75 of the tunnels are mostly ezy vpn connections. Currently the CPU during peak usage is averaging around 22%. We're planning on having over 1000 IPsec connections, mostly will be remote vpn access with about 170 of them ezy vpn and 250 l2l tunnels.
Is there any noticable CPU performance gain by using AES-128 bit instead of AES-256 on the phase2?
Thanks,
John

Just wondering if someone out there has noticed any performance gains by using AES-128 instead of AES-256. I'm trying standardize on a policy going forward.
Thanks!

Downgrading Windows 8.1 pro back to windows 8.1 regular

okay so my friend sent me a code for Windows 8.1 pro (I already had windows 8.1 but I thought I'd use it so I could try out hyper-v) and it all worked perfectly, apart from the fact that the code was only an activator code and now I need to enter another
code to get it to stop asking me to activate it, I'd be happy going back to windows 8.1 non-pro version but I just really need it to stop asking me to put in a code as it gets very frustrating while I am doing this on my pc. I know I shouldn't have used the
code without asking my friend if it worked properly or not but I just need to know if there is a way to downgrade back to what I used to have, thanks for the help!
I should also say that I am on a laptop that came with windows 8 already installed and have no product key for my original version

Hi,
Let make clear something.
Was the Windows 8.1 pro or Enterprise 64 bit on your computer?
Hyper-V is only available in the following versions of Windows:
• Windows 8 Pro 64-bit Edition
• Windows 8 Enterprise 64-bit Edition
• Windows 8.1 Pro 64-bit Edition
• Windows 8.1 Enterprise 64-bit Edition
If your laptop came with Windows 8 or Windows 8.1, how did you enable Hyper-V?
Please don't use the shared key with others. The key is the unique license for one copy of Windows.
Meanwhile, please reset or refresh your PC to roll back to Windows 8 If you upgraded your PC from
Windows 8 to Windows 8.1 and your PC has a
Windows 8 recovery partition.
How to refresh, reset, or restore your PC
http://windows.microsoft.com/en-IN/windows-8/restore-refresh-reset-pc
Karen Hu
TechNet Community Support

Unable to upgrade or install windows 10 enterprise technical preview from windows 8.1 pro

Compaq Presario SR2034NX
windows 8.1 pro build 9600 64 bit, x64processor
I have attempted a clean install booting from a burned dvd with the iso file on it using the windows 7 USB/DVD download tool, Ive attempted to boot from a usb using rufus. Ive even attempted to just run as administrator right from the download
the setup file.
Installing via USB windows 10 opens the language screen but everything on my screen is distorted, ive tried to change my screen resolution to fix this. it did not work. Once I managed to click my way to the next screen but windows 10 asked me
for a driver to be installed and I have no idea what driver that could be.
Installed via DVD and direct setup file windows 10 opens to the making sure your pc is updated.. then it downloads and says its installing. at the moment it finished installing and restarts the next screen is black and the windows wheel starts turning
it freezes.. about every minute to five minutes it will turn a bit more.. I left my pc in this state for a full 24hours without touching it and it never finished installing.
I have tried several different builds. I even downloaded bluestacks and ran windows 10 enterprise technical preview as a virtual and I was successful doing it this way but Ive already tested windows 10 on two other desktops and a laptop of mine and im ready
to make the switch. this is my last desktop to run windows 10 and its giving me a hard time.
can someone please help me figure this out

Hi Metro1952,
I found the following link indicates that there is no official driver designed for Windows 8 or later:
Compaq Presario Media Center SR2034NX Desktop PC
http://support.hp.com/us-en/drivers/selfservice/Compaq-Presario-SR2000-Desktop-PC-series/3239110/model/3250934
So, there might be a compatibility issue.
Again, to prepare the USB installation, you need ensure that you boot from the USB device, I suggest you make a clean USB boot drive by using diskpart:
DISKPART> list disk
DISKPART> select disk x (x is the USB drive letter)
DISKPART> clean
DISKPART> create partition primary
DISKPART> select partition 1
DISKPART> active
DISKPART> format FS=NTFS QUICK
DISKPART> assign
DISKPART> exit
Then copy the all installation files to the root of the USB drive:
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Windows 7 home premium oa sea 64 bit

My HpG42-456TX Notebook PC running on windows 7 home premium oa sea 64 bit crashed. Can I reinstall myself? Where should I download Windows 7 home premium oa sea 64 bit ？
This question was solved.
View Solution.

Hi,
There are Two options available.
1. You can order a replacement set of Recovery Discs using the link below - these will reinstall the operating system, all required drivers and nearly all of the original software ( the exception often being trials of MS Office ). They will also re-create all the original partitions, including the Recovery Partition. Activation of the OS will occur automatically.
Order HP Recovery Discs.
2. Another option you could consider is to create your own Windows 7 installation disc.
Before trying the following, make sure you can still read the 25 Character Product Activation key on your Windows COA label ( 5 blocks of 5 alpha/numeric sets ).
An example of a COA Label can be seen Here.
You can create a Windows 7 installation disc yourself using another PC - just download the correct Disc Image ( this must be the same version ( Basic, Premium, Professional etc ) that your activation key is for - ie you cannot upgrde or downgrade using this method ) from the link below and use an application such as ImgBurn to burn the ISO correctly to a blank DVD - a guide on using ImgBurn to write an ISO to a disc is Here. The Image source is Digital River.
Windows-7 sp1-iso-official-32-bit-and-64-bit
Use the disc to perform the installation, enter the Windows activation key found on the COA Label when requested and when the installation has completed, use the 'Phone Method' detailed in the link below to activate the OS - this method supported by Microsoft and is popular with people who just want a clean installation of Windows 7 without the additional software load normally bundled with OEM installations.
http://www.kodyaz.com/articles/how-to-activate-windows-7-by-phone.aspx
Additional drivers and software you may need can be found Here.
Best regards,
DP-K
****Click the White thumb to say thanks****
****Please mark Accept As Solution if it solves your problem****
****I don't work for HP****
Microsoft MVP - Windows Experience

Operating System change from Windows 7 to windows 8.1 pro 64 bit

I have HP Pavilion Dv6-6196ex with Windows 7 64 bit as original OS. I change my hard drive to 256 mb SSD and installed new OS windows 8.1 Pro 64 bit. Is there any suitable software coming from HP that is compatible to my new OS and can i get a recovery manager from HP and installed it on my new OS?

Sorry, but HP is only supporting and providing drivers for Windows 7 for this model on the HP Pavilion dv6-6196ex Entertainment Notebook PC Drivers page. The only purpose of the HP Recovery Manager is to return the computer to its original factory state. Becasue your computer shipped with Windows 7, the HP Recovery Manager would only restore Windows 7 and not the currently installed OS.
Please see HP Forun thread entitled "8.1 recovery discs" for more information on this subject. My suggestion is to use Windows "System Image Backup" utility to create an exact image of the Windows 8.1 partition as it currently is, on an external hard drive. If your computer developes issues or you need to replace the hard drive, all you have to do is "restore" the image to the computer. Please see Windows 8.1 Tip: Use System Image Backup for instructions on creating and restoring a "Windows - System Image Backup."
If you have any further questions, please don't hesitate to ask.
Please click the White KUDOS "Thumbs Up" to show your appreciation
Frank
{------------ Please click the "White Kudos" Thumbs Up to say THANKS for helping.
Please click the "Accept As Solution" on my post, if my assistance has solved your issue. ------------V
This is a user supported forum. I am a volunteer and I don't work for HP.
HP 15t-j100 (on loan from HP)
HP 13 Split x2 (on loan from HP)
HP Slate8 Pro (on loan from HP)
HP a1632x - Windows 7, 4GB RAM, AMD Radeon HD 6450
HP p6130y - Windows 7, 8GB RAM, AMD Radeon HD 6450
HP p6320y - Windows 7, 8GB RAM, NVIDIA GT 240
HP p7-1026 - Windows 7, 6GB RAM, AMD Radeon HD 6450
HP p6787c - Windows 7, 8GB RAM, NVIDIA GT 240

Unable to install Windows 8.1 pro 64 bit on my HP Pavilion g6 1318ax

Hello,
I have Windows 8.1 pro OS on my machine but that's 32 bit. I am trying to install 64 bit of the same but it says "This app can't run on your PC". The machine I am using is Pavilion g6 1318ax.
Please advise.
Thanks in anticipation.
Regards,
Dev

Hi:
You have to boot from the 64 bit installation media and do a clean (custom) install.
It will not run from a 32 bit Windows desktop.
No 64 bit operating system will.
In other words, you can't upgrade from a 32 bit to a 64 bit operating system, and retain your programs and files.
So back up any files you don't want to lose.

Windows 8.1 Pro Bitlocker AES 256-bit cypher question

Similar Messages

Maybe you are looking for