The Microsoft-Windows-SecureStartup-FilterDriver component contains settings to optimize BitLocker settings for PCs with hardware architectures such as System on a Chip (SoC).

These settings are intended for OEM manufacturing only. For specific guidance on using these settings, contact Microsoft.

Warning
Do not use these settings for standard 32-bit or 64-bit hardware architectures.

In This Section

Applies To

This element is available in the following editions and architectures.

Note
Although this component is available in x86 hardware architectures, these settings should not be used for standard x86 hardware architectures.

Windows Edition Windows for x86-based computers Windows for x64-based computers Windows for Itanium-based computers

Windows 8.1

x86 excluding PreventDeviceEncryption

amd64 only applies to PreventDeviceEncryption

Not available

Windows 8.1 Pro

x86 excluding PreventDeviceEncryption

amd64 only applies to PreventDeviceEncryption

Not available

Windows Server 2012 R2

Not available

amd64 only applies to PreventDeviceEncryption

Not available

Windows® 8

x86

Not available

Not available

Windows® 8 Enterprise

x86

Not available

Not available

Windows® 8 Pro

x86

Not available

Not available

Windows Server® 2012 Datacenter

Not available

Not available

Not available

Windows Server® 2012 Essentials

Not available

Not available

Not available

Windows Server® 2012 Foundation

Not available

Not available

Not available

Windows Server® 2012 Standard

Not available

Not available

Not available

XML Example

The following example specifies recommended values for Bitlocker optimizations on an x86 System on a Chip.

  Copy Code 
<component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <BytesDecryptedInDiskRequestOverhead>524288</BytesDecryptedInDiskRequestOverhead>
  <InPlaceCrypto>0</InPlaceCrypto>
  <MaxCryptoRequestsPerIo>5</MaxCryptoRequestsPerIo>
  <MaxDecryptRequests>0</MaxDecryptRequests>
  <MaxEncryptRequests>2</MaxEncryptRequests>
  <ModifiedWriteMaximum>4</ModifiedWriteMaximum>
  <ReadDoubleBuffering>0</ReadDoubleBuffering>
  <SlicedEncryptionInPlace>1</SlicedEncryptionInPlace>
  <SlicedEncryptionMinSize>524288</SlicedEncryptionMinSize>
  <SlicedEncryptionRequestsMax>1</SlicedEncryptionRequestsMax>
  <WriteIoAggregateMaxSize>1048576</WriteIoAggregateMaxSize>
  <WriteIoAggregateMinSize>1048576</WriteIoAggregateMinSize>
  <WriteSubrequestLength>524288</WriteSubrequestLength>
 </component>

See Also

Concepts

Components