{"id":2207,"date":"2024-05-27T11:29:28","date_gmt":"2024-05-27T11:29:28","guid":{"rendered":"https:\/\/howtogeek.blog\/cs\/?p=2207"},"modified":"2024-05-27T11:29:28","modified_gmt":"2024-05-27T11:29:28","slug":"windows-11-will-soon-be-encrypted-by-default-cs","status":"publish","type":"post","link":"https:\/\/howtogeek.blog\/cs\/windows-11-will-soon-be-encrypted-by-default-cs\/","title":{"rendered":"Windows 11 bude brzy ve v\u00fdchoz\u00edm nastaven\u00ed \u0161ifrov\u00e1n"},"content":{"rendered":"<p>Stejn\u011b jako jeho p\u0159edch\u016fdce Windows 10 je i Windows 11 vybaven \u0161ifrov\u00e1n\u00edm za\u0159\u00edzen\u00ed, kter\u00e9 pom\u00e1h\u00e1 chr\u00e1nit va\u0161e data omezen\u00edm p\u0159\u00edstupu k nim. Kdy\u017e zapnete \u0161ifrov\u00e1n\u00ed, mohou tak u\u010dinit pouze lid\u00e9, kte\u0159\u00ed maj\u00ed opr\u00e1vn\u011bn\u00ed k p\u0159\u00edstupu k dat\u016fm.<\/p>\n<p><strong>Jak funguje \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed?<\/strong> Jednodu\u0161e \u0159e\u010deno, Device Encryption zabra\u0148uje p\u0159\u00edstupu k va\u0161im dat\u016fm ulo\u017een\u00fdm na jednotce, i kdy\u017e ji n\u011bkdo jin\u00fd odstran\u00ed z va\u0161eho PC a nainstaluje do jin\u00e9ho syst\u00e9mu, aby k va\u0161im dat\u016fm m\u011bl p\u0159\u00edstup. P\u0159\u00edstup k dat\u016fm toti\u017e vy\u017eaduje de\u0161ifrovac\u00ed kl\u00ed\u010d, v jeho\u017e nep\u0159\u00edtomnosti jim obsah disku ned\u00e1v\u00e1 \u017e\u00e1dn\u00fd smysl.<\/p>\n<p>\u0160ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed se p\u0159i \u0161ifrov\u00e1n\u00ed soubor\u016f spol\u00e9h\u00e1 na n\u00e1stroj BitLocker, co\u017e znamen\u00e1, \u017ee mus\u00edte kl\u00ed\u010d BitLocker ulo\u017eit na jednotku USB nebo \u00fa\u010det Microsoft. V p\u0159\u00edpad\u011b ztr\u00e1ty kl\u00ed\u010de nebudete m\u00edt p\u0159\u00edstup ke sv\u00fdm dat\u016fm.<\/p>\n<p>Kdy\u017e p\u0159einstalujete nebo resetujete opera\u010dn\u00ed syst\u00e9m, syst\u00e9m Windows po\u017e\u00e1d\u00e1 o obnovovac\u00ed kl\u00ed\u010d n\u00e1stroje BitLocker. Ve v\u00fdchoz\u00edm nastaven\u00ed nen\u00ed \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed zapnuto p\u0159i prvn\u00ed instalaci Windows 11. To se v\u0161ak brzy zm\u011bn\u00ed.<\/p>\n<p>Microsoft \u00fadajn\u011b povol\u00ed Device Encryption ve v\u00fdchoz\u00edm nastaven\u00ed na edic\u00edch Pro a Home Windows 11, kdy\u017e v druh\u00e9 polovin\u011b roku vyd\u00e1 verzi 24H2. Krom\u011b toho bude povoleno automatick\u00e9 \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed, kdy\u017e u\u017eivatel\u00e9 nastavuj\u00ed sv\u016fj po\u010d\u00edta\u010d po jeho resetov\u00e1n\u00ed.<\/p>\n<p>Spole\u010dnost ji\u017e povolila \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed v n\u00e1hledov\u00fdch sestaven\u00edch Windows 11 24H2 RTM a upravila po\u017eadavky tak, aby bylo zaji\u0161t\u011bno, \u017ee je ve v\u00fdchoz\u00edm nastaven\u00ed povoleno p\u0159i nov\u00e9 instalaci syst\u00e9mu Windows.<\/p>\n<p>Zde bychom v\u0161ak r\u00e1di zd\u016fraznili, \u017ee \u0161ifrov\u00e1n\u00ed je ve v\u00fdchoz\u00edm nastaven\u00ed povoleno pouze p\u0159i nov\u00e9 instalaci syst\u00e9mu Windows 11 verze 24H2. Pokud pr\u00e1v\u011b upgradujete ze star\u0161\u00ed verze, nebude ve v\u00fdchoz\u00edm nastaven\u00ed povolena.<\/p>\n<h2 id=\"encryption-on-windows-11-home-pcs\">\u0160ifrov\u00e1n\u00ed na dom\u00e1c\u00edch po\u010d\u00edta\u010d\u00edch se syst\u00e9mem Windows 11<\/h2>\n<p>Na rozd\u00edl od stroj\u016f se syst\u00e9mem Windows 11 Pro budou po\u010d\u00edta\u010de s Windows 11 Home v\u00fdrobci \u0161ifrov\u00e1ny. V\u00fdrobci budou muset za t\u00edmto \u00fa\u010delem povolit p\u0159\u00edznak \u0161ifrov\u00e1n\u00ed BitLocker v UEFI. To znamen\u00e1, \u017ee po\u010d\u00edta\u010de vyroben\u00e9 na zak\u00e1zku nebudou ovlivn\u011bny.<\/p>\n<p>To znamen\u00e1, \u017ee pokud m\u00e1 po\u010d\u00edta\u010d funkci BitLocker, nov\u00e1 instalace nebo p\u0159einstalace umo\u017en\u00ed \u0161ifrov\u00e1n\u00ed s verz\u00ed 24H2. Stejn\u011b jako u po\u010d\u00edta\u010d\u016f se syst\u00e9mem Windows 11 Pro bude jednotka C, kter\u00e1 obsahuje syst\u00e9mov\u00e9 soubory, a dal\u0161\u00ed jednotky za\u0161ifrov\u00e1na.<\/p>\n<h2 id=\"concerns-regarding-bitlocker-encryption\">Obavy t\u00fdkaj\u00edc\u00ed se \u0161ifrov\u00e1n\u00ed BitLocker<\/h2>\n<p>Z hlediska bezpe\u010dnosti nab\u00edz\u00ed \u0161ifrov\u00e1n\u00ed dal\u0161\u00ed vrstvu zabezpe\u010den\u00ed va\u0161ich dat a zabra\u0148uje neopr\u00e1vn\u011bn\u00e9mu p\u0159\u00edstupu, co\u017e m\u016f\u017ee b\u00fdt docela v\u00fdhodn\u00e9. Velk\u00fdm probl\u00e9mem je v\u0161ak mo\u017enost ztr\u00e1ty dat. Pokud p\u0159einstalujete syst\u00e9m Windows a \u0161ifrov\u00e1n\u00ed je ve v\u00fdchoz\u00edm nastaven\u00ed povoleno bez va\u0161eho v\u011bdom\u00ed, mo\u017en\u00e1 nebudete m\u00edt p\u0159\u00edstup k soubor\u016fm.<\/p>\n<p>Spole\u010dnost Microsoft vy\u017eaduje, aby u\u017eivatel\u00e9 z\u00e1lohovali sv\u016fj \u0161ifrovac\u00ed kl\u00ed\u010d BitLocker, ale v\u017edy existuje mo\u017enost, \u017ee na to zapomenete nebo kl\u00ed\u010d ztrat\u00edte. P\u0159\u00edpadn\u011b m\u016f\u017eete ztratit p\u0159\u00edstup k \u00fa\u010dtu Microsoft, kde je kl\u00ed\u010d z\u00e1lohov\u00e1n. Proto\u017ee tento kl\u00ed\u010d nen\u00ed dostupn\u00fd ani pro Microsoft, nebude v\u00e1m v takov\u00e9 situaci schopen pomoci.<\/p>\n<figure class=\"wp-block-image\"><img alt=\"\" class=\"wp-image\" decoding=\"async\" height=\"433\" loading=\"lazy\" src=\"https:\/\/cdn.howtogeek.blog\/wp-content\/uploads\/2024\/05\/backup-bitlocker-recovery-key-manually-in-windows-11-1.webp\" title=\"\" width=\"769\"\/><\/figure>\n<p>Dal\u0161\u00edm probl\u00e9mem je, \u017ee \u0161ifrov\u00e1n\u00ed BitLocker m\u016f\u017ee ovlivnit v\u00fdkon syst\u00e9mu, zejm\u00e9na t\u011bch s SSD. V\u00fdkon SSD m\u016f\u017ee klesnout a\u017e o 45 % a pou\u017e\u00edv\u00e1n\u00ed softwaru BitLocker zp\u016fsob\u00ed, \u017ee v\u0161echny \u00falohy \u0161ifrov\u00e1n\u00ed a de\u0161ifrov\u00e1n\u00ed bude prov\u00e1d\u011bt CPU, co\u017e d\u00e1le ovliv\u0148uje v\u00fdkon.<\/p>\n<h2 id=\"avoiding-bitlocker-encryption-when-reinstalling-windows\">Vyhn\u011bte se \u0161ifrov\u00e1n\u00ed BitLocker p\u0159i p\u0159einstalaci syst\u00e9mu Windows<\/h2>\n<p>Aby byl n\u00e1stroj BitLocker povolen, v\u00e1\u0161 syst\u00e9m by m\u011bl spl\u0148ovat ur\u010dit\u00e9 hardwarov\u00e9 po\u017eadavky, nap\u0159\u00edklad m\u00edt UEFI a \u010dip TPM 1.2 nebo nov\u011bj\u0161\u00ed. Windows 11 kontroluje tyto po\u017eadavky b\u011bhem instalace, tak\u017ee pokud v\u00e1\u0161 po\u010d\u00edta\u010d podporuje opera\u010dn\u00ed syst\u00e9m, bude m\u00edt p\u0159i instalaci nebo p\u0159einstalaci Windows ve v\u00fdchoz\u00edm nastaven\u00ed povolen BitLocker.<\/p>\n<p>Na\u0161t\u011bst\u00ed existuj\u00ed zp\u016fsoby, jak obej\u00edt \u0161ifrov\u00e1n\u00ed. Nejjednodu\u0161\u0161\u00ed zp\u016fsob je pou\u017e\u00edt Rufus, software, kter\u00fd vytv\u00e1\u0159\u00ed bootovateln\u00e9 ISO Windows. P\u0159i vytv\u00e1\u0159en\u00ed instala\u010dn\u00edho obrazu m\u016f\u017ee deaktivovat \u0161ifrov\u00e1n\u00ed verze 24H2.<\/p>\n<figure class=\"wp-block-image\"><img alt=\"\" class=\"wp-image\" decoding=\"async\" height=\"485\" loading=\"lazy\" src=\"https:\/\/cdn.howtogeek.blog\/wp-content\/uploads\/2024\/05\/rufus-customize-windows-11-install-disable-tpm-check-1.webp\" title=\"\" width=\"861\"\/><\/figure>\n<p>Dal\u0161\u00ed mo\u017enost\u00ed je zak\u00e1zat automatick\u00e9 \u0161ifrov\u00e1n\u00ed pomoc\u00ed Editoru registru.<\/p>\n<ul>\n<li>Chcete-li to prov\u00e9st, otev\u0159ete p\u0159\u00edkazov\u00fd \u0159\u00e1dek b\u011bhem instalace stisknut\u00edm z\u00e1stupce <code>Shift + F10<\/code>.  <\/li>\n<li>Zadejte <code>regedit<\/code>do okna p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku a stisknut\u00edm kl\u00e1vesy \u201eEnter\u201c otev\u0159ete Editor registru.<\/li>\n<li>V Editoru registru p\u0159ejd\u011bte na n\u00e1sleduj\u00edc\u00ed adresu<code>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\BitLocker<\/code><\/li>\n<\/ul>\n<figure class=\"wp-block-image\"><img alt=\"\" class=\"wp-image\" decoding=\"async\" height=\"518\" loading=\"lazy\" src=\"https:\/\/cdn.howtogeek.blog\/wp-content\/uploads\/2024\/05\/b0-3-1.webp\" title=\"\" width=\"921\"\/><\/figure>\n<ul>\n<li>Na prav\u00e9 stran\u011b klikn\u011bte prav\u00fdm tla\u010d\u00edtkem a klikn\u011bte na <code>New<\/code>&gt; <code>Dword (32-bit) Value<\/code>.<\/li>\n<\/ul>\n<figure class=\"wp-block-image\"><img alt=\"\" class=\"wp-image\" decoding=\"async\" height=\"515\" loading=\"lazy\" src=\"https:\/\/cdn.howtogeek.blog\/wp-content\/uploads\/2024\/05\/b1-2-1.webp\" title=\"\" width=\"916\"\/><\/figure>\n<ul>\n<li>Pojmenujte hodnotu \u201ePreventDeviceEncryption\u201c a dvakr\u00e1t na ni klikn\u011bte. Do pole hodnoty zadejte 1 a pot\u00e9 klikn\u011bte na tla\u010d\u00edtko &#8216;OK&#8217;. Zav\u0159ete Editor registru.<\/li>\n<\/ul>\n<figure class=\"wp-block-image\"><img alt=\"\" class=\"wp-image\" decoding=\"async\" height=\"509\" loading=\"lazy\" src=\"https:\/\/cdn.howtogeek.blog\/wp-content\/uploads\/2024\/05\/b2-2-1.webp\" title=\"\" width=\"905\"\/><\/figure>\n<p>Vzhledem k tomu, \u017ee Microsoft se sna\u017e\u00ed povolit \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed ve Windows 11 ve v\u00fdchoz\u00edm nastaven\u00ed s verz\u00ed 24H2, OS bude kone\u010dn\u011b na stejn\u00e9 \u00farovni jako iOS a Android, kter\u00e9 \u0161ifrov\u00e1n\u00ed umo\u017e\u0148uj\u00ed u\u017e roky. I kdy\u017e m\u016f\u017ee poskytnout dal\u0161\u00ed zabezpe\u010den\u00ed, potenci\u00e1l ztr\u00e1ty dat je neuv\u011b\u0159iteln\u011b vysok\u00fd, co\u017e znamen\u00e1, \u017ee ne ka\u017ed\u00fd bude cht\u00edt, aby byly jejich stroje \u0161ifrov\u00e1ny.<\/p>\n<p>Na\u0161t\u011bst\u00ed s hacky registru a n\u00e1stroji, jako je Rufus, m\u016f\u017eete obej\u00edt \u0161ifrov\u00e1n\u00ed. Na druhou stranu, pokud d\u00e1v\u00e1te p\u0159ednost \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed, ujist\u011bte se, \u017ee m\u00e1te kl\u00ed\u010d BitLocker v bezpe\u010d\u00ed, abyste p\u0159ede\u0161li probl\u00e9m\u016fm p\u0159i p\u0159einstalaci syst\u00e9mu Windows.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Stejn\u011b jako jeho p\u0159edch\u016fdce Windows 10 je i Windows 11 vybaven \u0161ifrov\u00e1n\u00edm za\u0159\u00edzen\u00ed, kter\u00e9 pom\u00e1h\u00e1 chr\u00e1nit va\u0161e data omezen\u00edm p\u0159\u00edstupu k nim. Kdy\u017e zapnete \u0161ifrov\u00e1n\u00ed, mohou tak u\u010dinit pouze lid\u00e9, kte\u0159\u00ed maj\u00ed opr\u00e1vn\u011bn\u00ed k p\u0159\u00edstupu k dat\u016fm. Jak funguje \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed? Jednodu\u0161e \u0159e\u010deno, Device Encryption zabra\u0148uje p\u0159\u00edstupu k va\u0161im dat\u016fm ulo\u017een\u00fdm na jednotce, i kdy\u017e [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[5,85],"class_list":["post-2207","post","type-post","status-publish","format-standard","hentry","category-how-to","tag-windows","tag-windows-11"],"acf":[],"_links":{"self":[{"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/posts\/2207","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/comments?post=2207"}],"version-history":[{"count":1,"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/posts\/2207\/revisions"}],"predecessor-version":[{"id":2208,"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/posts\/2207\/revisions\/2208"}],"wp:attachment":[{"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/media?parent=2207"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/categories?post=2207"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/howtogeek.blog\/cs\/wp-json\/wp\/v2\/tags?post=2207"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}