Skip to content

Instantly share code, notes, and snippets.

@reitowo

reitowo/facts-about-ncrypt-vbs-keys.md

Last active May 30, 2025 09:40
Show Gist options
  • Save reitowo/bb35db30cd4af7c1446f6a59e6006527 to your computer and use it in GitHub Desktop.
Save reitowo/bb35db30cd4af7c1446f6a59e6006527 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
facts-about-ncrypt-vbs-keys.md
  1. NCRYPT_USE_PER_BOOT_KEY_FLAG will be erased after reboot, even persisted with name.
  2. NCRYPT_USE_PER_BOOT_KEY_FLAG will not take effect, if same named key was already created with NCRYPT_REQUIRE_VBS_FLAG only.
  3. Same, if a key was created with NCRYPT_USE_PER_BOOT_KEY_FLAG and was created again with NCRYPT_OVERWRITE_KEY_FLAG without NCRYPT_USE_PER_BOOT_KEY_FLAG, this flag will not be overwritten, and the key will keep being erased across boots.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment