Edit

Share via

GetEncryptionMethod method of the Win32_EncryptableVolume class

  • Article

The GetEncryptionMethod method of the Win32_EncryptableVolume class indicates the encryption algorithm and key size used on the volume.

Syntax

uint32 GetEncryptionMethod(
  [out] uint32 EncryptionMethod,
  [out] string SelfEncryptionDriveEncryptionMethod
);

Parameters

EncryptionMethod [out]

Type: uint32

An unsigned integer that specifies the encryption algorithm and key size used on the volume.

Value Meaning
None
0
 The volume is not encrypted.
AES_128_WITH_DIFFUSER
1
 The volume has been fully or partially encrypted with the Advanced Encryption Standard (AES) algorithm enhanced with a diffuser layer, using an AES key size of 128 bits. This method is no longer available on devices running Windows 8.1 or higher.
AES_256_WITH_DIFFUSER
2
 The volume has been fully or partially encrypted with the Advanced Encryption Standard (AES) algorithm enhanced with a diffuser layer, using an AES key size of 256 bits. This method is no longer available on devices running Windows 8.1 or higher.
AES_128
3
 The volume has been fully or partially encrypted with the Advanced Encryption Standard (AES) algorithm, using an AES key size of 128 bits.
AES_256
4
 The volume has been fully or partially encrypted with the Advanced Encryption Standard (AES) algorithm, using an AES key size of 256 bits.
HARDWARE_ENCRYPTION
5
 The volume has been fully or partially encrypted by using the hardware capabilities of the drive.
XTS_AES_128
6
 The volume has been fully or partially encrypted with XTS using the Advanced Encryption Standard (AES), and an AES key size of 128 bits. This method is only available on devices running Windows 10, version 1511 or higher.
XTS_AES_256
7
 The volume has been fully or partially encrypted with XTS using the Advanced Encryption Standard (AES), and an AES key size of 256 bits. This method is only available on devices running Windows 10, version 1511 or higher.
(uint32)–1
 UNKNOWN
The volume has been fully or partially encrypted with an unknown algorithm and key size.

 

SelfEncryptionDriveEncryptionMethod [out]

Type: string

The encryption algorithm is configured on the self-encrypting drive. A null string means that either BitLocker is using software encryption or no encryption method is reported.

Return value

Type: uint32

This method returns one of the following codes or another error code if it fails.

Return code/value Description
S_OK
0 (0x0)
 The method was successful.

 

Remarks

Managed Object Format (MOF) files contain the definitions for Windows Management Instrumentation (WMI) classes. MOF files are not installed as part of the Windows SDK. They are installed on the server when you add the associated role by using the Server Manager. For more information about MOF files, see Managed Object Format (MOF).

Requirements

Requirement Value
Minimum supported client
 Windows Vista Enterprise, Windows Vista Ultimate [desktop apps only]
Minimum supported server
 Windows Server 2008 [desktop apps only]
Namespace
 Root\CIMV2\Security\MicrosoftVolumeEncryption
MOF
Win32_encryptablevolume.mof

See also

Win32_EncryptableVolume