Windows 11 General Discussion

[P4-630]

Using Bitlocker? You may already have noticed:

Tested: Windows 11 Pro's On-By-Default Encryption Slows SSDs Up to 45%

BitLocker software encryption slows performance. Here's how to fix it.

www.tomshardware.com

 

[Solaris17]

the NAS is chock full of Ultrastars...

as god intended

 

[RJARRRPCGP]

i come back click on personal icon on desktop like magic arena to play a game, it takes like 10 seconds before it will let me click on it.

its fucking infuriating.

That's the known Location Services bug in 11. (or what it used to be called)

 

[lexluthermiester]

Using Bitlocker? You may already have noticed:

Tested: Windows 11 Pro's On-By-Default Encryption Slows SSDs Up to 45%

BitLocker software encryption slows performance. Here's how to fix it.

www.tomshardware.com

Never seen this problem on my systems. Bitlocker isn't just disabled, it's deleted entirely.

 

[FoulOnWhite]

Checked and it's off or disabled on mine

 

[windwhirl]

I'm pretty sure you have to enable it yourself tho? Unless it's an OEM device running the OEM-installed system, like a laptop for example.

 

[dhklopp]

I'm pretty sure you have to enable it yourself tho? Unless it's an OEM device running the OEM-installed system, like a laptop for example.

It's off on my laptop which I ran a fresh install on when I got it. So this seems about right.

 

[Solaris17]

It should be noted that you only get the “bad” setting if you set it up yourself. You are presented with a screen during setup that asks you to choose between used space only or entire disk. It even specifies the difference.

It looks like a lot of people that don’t use bitlocker trying to explain it to everyone; which doesn’t help anyone lol.

 

[R-T-B]

It should be noted that you only get the “bad” setting if you set it up yourself. You are presented with a screen during setup that asks you to choose between used space only or entire disk. It even specifies the difference.

It looks like a lot of people that don’t use bitlocker trying to explain it to everyone; which doesn’t help anyone lol.

Software encryption in general is slow, doesn't matter if its used sectors only or the whole thing.

They really did everyone a disservice assuming everyone wants or needs software encryption, especially when opal is available on a good many ssds, but bitlocker refuses to use it now by default.

 

[Solaris17]

Software encryption in general is slow, doesn't matter if its used sectors only or the whole thing.

They really did everyone a disservice assuming everyone wants or needs software encryption, especially when opal is available on a good many ssds, but bitlocker refuses to use it now by default.

Yikes, I didnt expect anything that shallow. I guess this is the windows 11 thread though.


For anyone else that may come across this sea of anti-encryption. If you can use opal go for it, but make sure you know the downsides regarding failure and key management. If you do choose to go bitlocker or LVM via TPM make sure you do the entire disk at once to reduce performance loss and as with all encryption methods save your keys.

 

[R-T-B]

but make sure you know the downsides regarding failure and key management.

Its basically the same as software bitlocker. Both store the keys in the TPM. If you reset your firmware, good luck. That's why even software encryption by default is a bad idea. To my knowledge you aren't even prompted to save your keys.

Yikes, I didnt expect anything that shallow.

Not sure what you mean. Care to clarify?

 

[Solaris17]

That's why even software encryption by default is a bad idea.

there is the bias. Thanks bro!

 

[R-T-B]

there is the bias. Thanks bro!

What part of "I turned this on and didn't prompt you to make a recovery key backup" could possibly be well thoughtout?

I'm not biased I use software encryption daily but there is a thing called use cases and not everyone applies.

As it stands, a metric button of users are going to be one UEFI update away from bad data loss.

 

[Solaris17]

What part of "I turned this on and didn't prompt you to make a recovery key backup" could possibly be well thoughtout?

It is well thoughtout.

This thread though is full of some really disingenuous people though. It pretty much contains the following members in 185 pages.

- Encryption is bad
- Disable Fastboot and UEFI
- Windows 11 is terrible and I hate change
- Microsoft steals all my data

It is an echo chamber for people that dont read:

- White papers
- Descriptions
- Tutorials

Or people that cant handle:

- Change

It is repeatedly a classic case of "I used to know computers in 1986 but never bothered to keep up and all of this scares me." Almost everyone that supports anything like bitlocker or MS accounts, or new tech requirements, is shunned and overwhelmed by people that openly admit they run:

- Illegal versions of windows 10
- Windows 7

There is rare exception to this for someone that is open to actual education or even a new idea.

encryption keys for bitlocker in this case, DO INFACT ask you not ONLY HOW to save your key but will AUTOMATICALLY save them to your MS account if you are logged in.

I will be a little more clear too. One moment.

Bitlocker......Will ASK YOU TO COPY YOUR UNLOCK CODE BEFORE IT EVEN STARTS ENCRYPTION.

OPAL: is based off ATA password support.

https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp3755.pdf

It literally will not enable until you provide it with a password YOU KNOW first.

For good measure I don't want to imply that you can only back it up during encryption, that would be vague of me. So here. Have this fancy gif.

 

[Darmok N Jalad]

It is well thoughtout.

This thread though is full of some really disingenuous people though. It pretty much contains the following members in 185 pages.

- Encryption is bad
- Disable Fastboot and UEFI
- Windows 11 is terrible and I hate change
- Microsoft steals all my data

It is an echo chamber for people that dont read:

- White papers
- Descriptions
- Tutorials

Or people that cant handle:

- Change

It is repeatedly a classic case of "I used to know computers in 1986 but never bothered to keep up and all of this scares me." Almost everyone that supports anything like bitlocker or MS accounts, or new tech requirements, is shunned and overwhelmed by people that openly admit they run:

- Illegal versions of windows 10
- Windows 7

There is rare exception to this for someone that is open to actual education or even a new idea.

encryption keys for bitlocker in this case, DO INFACT ask you not ONLY HOW to save your key but will AUTOMATICALLY save them to your MS account if you are logged in.

I will be a little more clear too. One moment.

Bitlocker......Will ASK YOU TO COPY YOUR UNLOCK CODE BEFORE IT EVEN STARTS ENCRYPTION.

OPAL: is based off ATA password support.

https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp3755.pdf

It literally will not enable until you provide it with a password YOU KNOW first.

For good measure I don't want to imply that you can only back it up during encryption, that would be vague of me. So here. Have this fancy gif.

That is one wide res!

 

[Solaris17]

That is one wide res!

man I got rid of my 3 4k displays because monitor arms are terrible. I really liked have multiple desktops to put windows on so I could work with things full screen.

I thought I could simplify and go with something like this but it’s a change I don’t mind window snapping but I do miss certain apps being full screen.

I find myself using the windows virtual desktop feature a lot. I’m almost used to it, but is is a change.

 

[R-T-B]

OPAL: is based off ATA password support.

Lol no. Please dude. It's part of the TCG family of protocols. And it can be fed via a TPM with the addition of another protocol, name escapes me, edrive is what you are looking into though.

EDIT: It's IEEE 1667

I stopped reading there but I will say I only have one gripe here and don't appreciate you lumping me in with the tinfoil hatters. I'm not that and I'd hope you knew that by now.

Bitlocker......Will ASK YOU TO COPY YOUR UNLOCK CODE BEFORE IT EVEN STARTS ENCRYPTION.

Not on the new default when it does it on install. THAT IS MY ISSUE IN A NUTSHELL. I HAVE LITERALLY HAD THIS HAPPEN.

 

[gurusmi]

Windows isn't well thought about the way how some branches have to work. In detail win 11 does nothing better than Win NT did. But at all the (professional) migrations since then some branches have to pay a hell to keep all their employees trained. At every migration and version stepp all the software has to be checked again. If not the comanies who deny to will loose their rights to produce and sell their producrs. This is i.e. every single firm in the MedTech/BioTech and pharmaceutical branch. There the FDA and EMA define the rules and everybody has to follow. It is small minded to take only a look at the private area. The companies brings the money. Not the gamers.

 

[Solaris17]

Not on the new default when it does it on install. THAT IS MY ISSUE IN A NUTSHELL. I HAVE LITERALLY HAD THIS HAPPEN.

No you didnt bro. You read the line before that. It will auto save to your MS account and if you dont use one it will not encrypt. Not to mention you alays have the option to backup the key whenever you want should you manually encrypt with no account even after the initial encryption.

Let me know if you need me to make you a video to disprove auto encryption without MS account for you I will take the time

 

[R-T-B]

No you didnt bro. You read the line before that. It will auto save to your MS account and if you dont use one it will not encrypt. Not to mention you alays have the option to backup the key whenever you want should you manually encrypt with no account even after the initial encryption.

Let me know if you need me to make you a video to disprove auto encryption without MS account for you I will take the time

I know the dialog you are talking about, it is literally not presented if you just do a stock install w/o account, and yet you get setup with bitlocker drive encryption.

The whole internet isn't wrong here dude, you are.

Take the time but do it from a fresh install with latest media on a secure core pc or dont bother. Also to perfectly replicate you probably want to do a local account.

 

[Solaris17]

The whole internet isn't wrong here dude, you are.

Its short sighted to consider this thread the whole internet.

Did you want the video using windows deployment service or the ISO from the MS website?

Maybe both?

 

[R-T-B]

Its short sighted to consider this thread the whole internet.

This has been news well beyond this thread, do a google search man.

I use an ISO personally.

 

[windwhirl]

What part of "I turned this on and didn't prompt you to make a recovery key backup" could possibly be well thoughtout?

About this particular bit, if you have a Microsoft account tied to your computer, the recovery key is stored in your account. So you can pull it back by logging to your Microsoft Account.

I'm not sure however what happens if you don't have a Microsoft account logged in. In theory it shouldn't be a problem because you're "required" to use one, so it's a problem for the people that skip that part, which is not Microsoft's idea so it seems to me Microsoft would say "your fault for not using a Microsoft account".

BTW, since I don't have Bitlocker enabled, I just get this when I go to manage my recovery keys:

 

[Darmok N Jalad]

man I got rid of my 3 4k displays because monitor arms are terrible. I really liked have multiple desktops to put windows on so I could work with things full screen.

I thought I could simplify and go with something like this but it’s a change I don’t mind window snapping but I do miss certain apps being full screen.

I find myself using the windows virtual desktop feature a lot. I’m almost used to it, but is is a change.

I bet. I'd use the crap of that at work, but at home I tend to focus more on full screen stuff. My work desk is equipped with 2 curved 30" gaming displays, and the desk has a lift for standing. Occasionally, I have a spreadsheet so wide that it extends across both, but that's pretty rare.

 

[R-T-B]

About this particular bit, if you have a Microsoft account tied to your computer, the recovery key is stored in your account. So you can pull it back by logging to your Microsoft Account.
View attachment 318578

I'm not sure however what happens if you don't have a Microsoft account logged in. In theory it shouldn't be a problem because you're "required" to use one, so it's a problem for the people that skip that part, which is not Microsoft's idea so it seems to me Microsoft would say "your fault for not using a Microsoft account".

BTW, since I don't have Bitlocker enabled, I just get this when I go to manage my recovery keys:
View attachment 318581

Yeah, its probably going to be an issue more for the limited group forcing local accounts. I forgot that that's a limited group of "do it yourselfers" now. This tempers my outrage, thanks.

@Solaris17 , this is pretty much my worry settled in a nutshell if you want to save the effort lol. The default consumer will be fine. I just didn't notice this since I run enterprise.