Scegli il metodo e il livello di codifica per la crittografia delle unità (Windows 10 versione 1511 e successive): valore del Registro di sistema EncryptionMethodWithXtsOs e altri 2ComputerHKLM\Software\Policies\Microsoft\FVE
- ID criterio
- EncryptionMethodWithXts_Name
- Ambito
- Configurazione computer
- Supportato in
- Almeno Windows Server 2016 o Windows 10
- Origine
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (versione 1.0)
- Categoria
- Componenti di Windows › Crittografia unità BitLocker
Registro
EncryptionMethodWithXtsOs
REG_DWORDComputerHKLM\SOFTWARE\Policies\Microsoft\FVE Chiave corrente
- Valore abilitato
- Dipende dal valore dell'opzione
- Elemento
- Selezionare il metodo di crittografia per le unità del sistema operativo:
| Voce | Valore memorizzato |
|---|---|
| AES-CBC a 128 bit | 3 |
| AES-CBC a 256 bit | 4 |
| XTS-AES a 128 bit (impostazione predefinita) | 6 |
| XTS-AES a 256 bit | 7 |
Applica con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE] ; Opzioni (usarne solo una) ; AES-CBC a 128 bit "EncryptionMethodWithXtsOs"=dword:00000003 ; AES-CBC a 256 bit "EncryptionMethodWithXtsOs"=dword:00000004 ; XTS-AES a 128 bit (impostazione predefinita) "EncryptionMethodWithXtsOs"=dword:00000006 ; XTS-AES a 256 bit "EncryptionMethodWithXtsOs"=dword:00000007
CMD
:: Opzioni (usarne solo una) :: AES-CBC a 128 bit reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsOs" /t REG_DWORD /d 3 /f :: AES-CBC a 256 bit reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsOs" /t REG_DWORD /d 4 /f :: XTS-AES a 128 bit (impostazione predefinita) reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsOs" /t REG_DWORD /d 6 /f :: XTS-AES a 256 bit reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsOs" /t REG_DWORD /d 7 /f
PowerShell
# Comune: crea la chiave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Force | Out-Null # Opzioni (usarne solo una) # AES-CBC a 128 bit New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsOs' -PropertyType DWord -Value 3 -Force | Out-Null # AES-CBC a 256 bit New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsOs' -PropertyType DWord -Value 4 -Force | Out-Null # XTS-AES a 128 bit (impostazione predefinita) New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsOs' -PropertyType DWord -Value 6 -Force | Out-Null # XTS-AES a 256 bit New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsOs' -PropertyType DWord -Value 7 -Force | Out-Null
EncryptionMethodWithXtsFdv
REG_DWORDComputerHKLM\SOFTWARE\Policies\Microsoft\FVE Chiave corrente
- Valore abilitato
- Dipende dal valore dell'opzione
- Elemento
- Selezionare il metodo di crittografia per le unità dati fisse:
| Voce | Valore memorizzato |
|---|---|
| AES-CBC a 128 bit | 3 |
| AES-CBC a 256 bit | 4 |
| XTS-AES a 128 bit (impostazione predefinita) | 6 |
| XTS-AES a 256 bit | 7 |
Applica con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE] ; Opzioni (usarne solo una) ; AES-CBC a 128 bit "EncryptionMethodWithXtsFdv"=dword:00000003 ; AES-CBC a 256 bit "EncryptionMethodWithXtsFdv"=dword:00000004 ; XTS-AES a 128 bit (impostazione predefinita) "EncryptionMethodWithXtsFdv"=dword:00000006 ; XTS-AES a 256 bit "EncryptionMethodWithXtsFdv"=dword:00000007
CMD
:: Opzioni (usarne solo una) :: AES-CBC a 128 bit reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsFdv" /t REG_DWORD /d 3 /f :: AES-CBC a 256 bit reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsFdv" /t REG_DWORD /d 4 /f :: XTS-AES a 128 bit (impostazione predefinita) reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsFdv" /t REG_DWORD /d 6 /f :: XTS-AES a 256 bit reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsFdv" /t REG_DWORD /d 7 /f
PowerShell
# Comune: crea la chiave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Force | Out-Null # Opzioni (usarne solo una) # AES-CBC a 128 bit New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsFdv' -PropertyType DWord -Value 3 -Force | Out-Null # AES-CBC a 256 bit New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsFdv' -PropertyType DWord -Value 4 -Force | Out-Null # XTS-AES a 128 bit (impostazione predefinita) New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsFdv' -PropertyType DWord -Value 6 -Force | Out-Null # XTS-AES a 256 bit New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsFdv' -PropertyType DWord -Value 7 -Force | Out-Null
EncryptionMethodWithXtsRdv
REG_DWORDComputerHKLM\SOFTWARE\Policies\Microsoft\FVE Chiave corrente
- Valore abilitato
- Dipende dal valore dell'opzione
- Elemento
- Selezionare il metodo di crittografia per le unità dati rimovibili:
| Voce | Valore memorizzato |
|---|---|
| AES-CBC a 128 bit (impostazione predefinita) | 3 |
| AES-CBC a 256 bit | 4 |
| XTS-AES a 128 bit | 6 |
| XTS-AES a 256 bit | 7 |
Applica con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE] ; Opzioni (usarne solo una) ; AES-CBC a 128 bit (impostazione predefinita) "EncryptionMethodWithXtsRdv"=dword:00000003 ; AES-CBC a 256 bit "EncryptionMethodWithXtsRdv"=dword:00000004 ; XTS-AES a 128 bit "EncryptionMethodWithXtsRdv"=dword:00000006 ; XTS-AES a 256 bit "EncryptionMethodWithXtsRdv"=dword:00000007
CMD
:: Opzioni (usarne solo una) :: AES-CBC a 128 bit (impostazione predefinita) reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsRdv" /t REG_DWORD /d 3 /f :: AES-CBC a 256 bit reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsRdv" /t REG_DWORD /d 4 /f :: XTS-AES a 128 bit reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsRdv" /t REG_DWORD /d 6 /f :: XTS-AES a 256 bit reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v "EncryptionMethodWithXtsRdv" /t REG_DWORD /d 7 /f
PowerShell
# Comune: crea la chiave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Force | Out-Null # Opzioni (usarne solo una) # AES-CBC a 128 bit (impostazione predefinita) New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsRdv' -PropertyType DWord -Value 3 -Force | Out-Null # AES-CBC a 256 bit New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsRdv' -PropertyType DWord -Value 4 -Force | Out-Null # XTS-AES a 128 bit New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsRdv' -PropertyType DWord -Value 6 -Force | Out-Null # XTS-AES a 256 bit New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\FVE' -Name 'EncryptionMethodWithXtsRdv' -PropertyType DWord -Value 7 -Force | Out-Null