Timeline for Is BitLocker on a virtual machine still FIPS 140-2 compliant?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 20, 2012 at 18:05 | comment | added | Jim B | while I understand your point, One of the points you make is that subverting the protection sounds fishy. In the bitlocker fips 140-2 validation doc the boundaries were defined as "physically contiguous enclosure of the computer system upon which Microsoft Windows Server 2008 R2 and BitLocker™ Drive Encryption executes" Unless you have also encrypted the underlying FS that the VM lives on- I'm not sure that fips 140 is still valid. EFS can be FIPS 140 compliant regardless of system enclosure. | |
| Jan 20, 2012 at 16:20 | comment | added | Gilles 'SO- stop being evil' | The point of compliance isn't security, it's regulations (or contractual requirements). Especially for FIPS 140 level 1, which says next to nothing about security. | |
| Jan 18, 2012 at 16:56 | history | answered | Jim B | CC BY-SA 3.0 |