Microsoft-Windows-SecureStartup-FilterDriver
Applies To: Windows 8, Windows Server 2012
The Microsoft-Windows-SecureStartup-FilterDriver component contains settings to optimize BitLocker settings for PCs with hardware architectures such as System on a Chip (SoC).
These settings are intended for OEM manufacturing only. For specific guidance on using these settings, contact Microsoft.
Warning
Do not use these settings for standard 32-bit or 64-bit hardware architectures.
These settings only apply to Windows 8.
In This Section
Applies To
This element is available in the following editions and architectures.
Note
Although this component is available in x86 hardware architectures, these settings should not be used for standard x86 hardware architectures.
| Windows Edition | Windows for x86-based computers | Windows for x64-based computers | Windows for Itanium-based computers |
|---|---|---|---|
Windows 8.1 |
x86 excluding PreventDeviceEncryption |
amd64 only applies to PreventDeviceEncryption |
Not available |
Windows 8.1 Pro |
x86 excluding PreventDeviceEncryption |
amd64 only applies to PreventDeviceEncryption |
Not available |
Windows Server 2012 R2 |
Not available |
amd64 only applies to PreventDeviceEncryption |
Not available |
Windows® 8 |
x86 |
Not available |
Not available |
Windows® 8 Enterprise |
x86 |
Not available |
Not available |
Windows® 8 Pro |
x86 |
Not available |
Not available |
Windows Server® 2012 Datacenter |
Not available |
Not available |
Not available |
Windows Server® 2012 Essentials |
Not available |
Not available |
Not available |
Windows Server® 2012 Foundation |
Not available |
Not available |
Not available |
Windows Server® 2012 Standard |
Not available |
Not available |
Not available |
XML Example
The following example specifies recommended values for Bitlocker optimizations on an x86 System on a Chip.
<component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="https://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<BytesDecryptedInDiskRequestOverhead>524288</BytesDecryptedInDiskRequestOverhead>
<InPlaceCrypto>0</InPlaceCrypto>
<MaxCryptoRequestsPerIo>5</MaxCryptoRequestsPerIo>
<MaxDecryptRequests>0</MaxDecryptRequests>
<MaxEncryptRequests>2</MaxEncryptRequests>
<ModifiedWriteMaximum>4</ModifiedWriteMaximum>
<ReadDoubleBuffering>0</ReadDoubleBuffering>
<SlicedEncryptionInPlace>1</SlicedEncryptionInPlace>
<SlicedEncryptionMinSize>524288</SlicedEncryptionMinSize>
<SlicedEncryptionRequestsMax>1</SlicedEncryptionRequestsMax>
<WriteIoAggregateMaxSize>1048576</WriteIoAggregateMaxSize>
<WriteIoAggregateMinSize>1048576</WriteIoAggregateMinSize>
<WriteSubrequestLength>524288</WriteSubrequestLength>
</component>