Follow-up: NVIDIA driver + Bitlocker

Just installed the latest NVIDIA driver (397.xx) after having disabled
Bitlocker. The installation went through fine, rebooted and caused no
issue upon return.

I don't know whether Bitlocker itself was the issue or a recent update
which affected both the driver and the encryption, but I guess it
would be good for us all to know that an encrypted operating system
drive could result in a _very_ screwed up computer if the user
attempts to install a recent GPU driver.

a.m wrote:

Just installed the latest NVIDIA driver (397.xx) after having disabled
Bitlocker. The installation went through fine, rebooted and caused no
issue upon return.

I don't know whether Bitlocker itself was the issue or a recent update
which affected both the driver and the encryption, but I guess it
would be good for us all to know that an encrypted operating system
drive could result in a _very_ screwed up computer if the user
attempts to install a recent GPU driver.

https://docs.microsoft.com/en-us/win...otandbitlocker
Section: Configurable Code Integrity (CCI)
Code Integrity (CI) improves the security of the operating system by
validating the integrity of a driver or application each time it is
loaded into memory. CI contains two main components - Kernel Mode
Code Integrity (KMCI) ...

Drivers run at the kernel level (ring 0), same as the Bitlocker
protection. I suspect anything you install that runs a the kernel level
will require special Bitlocker handling: disable Bitlocker, install
kernel-mode driver, test, reenable Bitlocker.

Bitlocker was designed for enterprise deployment with administration and
management by sysadmins. Although it does whole-disk encryption like
many other products, it looks to have more security features other than
just encryption. It really isn't something for personal dabbling.