Our company policy is requires the local encryption of data for all email (in case the device is stolen)

  • Does the Windows Surface (either version) support local encryption?

  • Is the local device information sufficiently protected from offline attacks


The Surface Pro runs Windows 8 Pro and has a TPM, so in theory at least, you should have all the available security features of any Windows 8 laptop, including BitLocker.

  • I wonder if this is enforced by the Activesync protocol. MSFT is notoriously bad at enforcing the Activesync policies published by Exchange (e.g. Almost every Windows phone) – goodguys_activate Mar 26 '13 at 14:38
  • 1
    @makerofthings7 Well, on the Surface Pro you're going to be using Outlook as your Exchange client, and presumably using BitLocker for full-disk-encrypytion, so all data should be fully encrypted. Think of the device in this case as a laptop, rather than a phone. – Xander Mar 26 '13 at 14:53
  • So I wonder if the Activesync policy of "Encryption" will enable Bitlocker. Also that makes me wonder what will happen to the recovery key, and how that can be integrated into existing Corp. IT controls. – goodguys_activate Mar 26 '13 at 15:04
  • Outlook will not enforce ActiveSync policies. It is up to you and IT to enforce policies through GPO. – Steve Mar 26 '13 at 16:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.