Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Does BitLocker encrypt recovery information as it is sent to AD DS?

April 26, 2017AD BitLocker DS encrypt recovery sent

0

Posted

Does BitLocker encrypt recovery information as it is sent to AD DS?

1 Answer

0

Posted

Yes, the transmission of recovery information from a Windows 7–based client computer to AD DS is protected by using the Kerberos authentication protocol. Specifically, the connection uses the authentication flags ADS_SECURE_AUTHENTICATION, ADS_USE_SEALING, and ADS_USE_SIGNING. For more information about Active Directory authentication flags, see ADS_AUTHENTICATION_ENUM Enumeration (http://go.microsoft.com/fwlink/?LinkId=79643).