Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Our company policy is requires the local encryption of data for all email (in case the device is stolen)

  • Does the Windows Surface (either version) support local encryption?

  • Is the local device information sufficiently protected from offline attacks

share|improve this question

The Surface Pro runs Windows 8 Pro and has a TPM, so in theory at least, you should have all the available security features of any Windows 8 laptop, including BitLocker.

share|improve this answer
I wonder if this is enforced by the Activesync protocol. MSFT is notoriously bad at enforcing the Activesync policies published by Exchange (e.g. Almost every Windows phone) – LamonteCristo Mar 26 '13 at 14:38
@makerofthings7 Well, on the Surface Pro you're going to be using Outlook as your Exchange client, and presumably using BitLocker for full-disk-encrypytion, so all data should be fully encrypted. Think of the device in this case as a laptop, rather than a phone. – Xander Mar 26 '13 at 14:53
So I wonder if the Activesync policy of "Encryption" will enable Bitlocker. Also that makes me wonder what will happen to the recovery key, and how that can be integrated into existing Corp. IT controls. – LamonteCristo Mar 26 '13 at 15:04
Outlook will not enforce ActiveSync policies. It is up to you and IT to enforce policies through GPO. – Steve Mar 26 '13 at 16:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.