Latest / The Windows Podcast with Fexingo: Microsoft, PC, and Enterprise Windows Conversations
Windows 11 Quietly Mandates Enterprise BitLocker Device Encryption
Episode 119 of The Windows Podcast digs into Microsoft's latest quiet mandate: BitLocker device encryption is now the default for all Windows 11 Enterprise deployments. Lucas and Luna break down what this means for IT admins, how it intersects with previous mandates like TPM 2.0 and Secure Boot, and the real-world tension between security and data recovery. They discuss the cryptographic details—XTS-AES 128-bit by default, the shift from AES-CBC—and unpack the recovery key management challenge that trips up organizations that aren't already using Microsoft Account or Azure AD. If your…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.