• Romkslrqusz
    link
    fedilink
    English
    23 months ago

    It is, Secure boot and the TPM must both be enabled.

    If you check Msinfo32 / “System Information” with admin rights, there is a “device encryption” listing that maybhave additional information.

    There are rare instances where a device won’t support automatic encryption due to “Un-allowed DMA capable bus/device(s) detected” which requires a registry tweak to work around

    • @bandwidthcrisis
      link
      English
      13 months ago

      Un-allowed DMA capable bus/device(s)

      And there it is in msinfo!

      Thanks very much. I’ve been using veracrypt for years, it’s good to know that I have another option (especially to simplify things for family members).