Windows, \u00e7e\u015fitli g\u00f6revler i\u00e7in G\u00fcvenlik Yard\u0131mc\u0131s\u0131’n\u0131 kullanabilir. Anahtarlar\u0131n\u0131z\u0131 korumaktan cihaz\u0131n\u0131z\u0131 \u015fifrelemeye kadar. Ancak Elcomsoft’un ger\u00e7ekle\u015ftirilen testlerden edindi\u011fi izlenimlere g\u00f6re, Windows’ta TPM teknolojisinin pratik kullan\u0131m\u0131 Microsoft’un iddia etti\u011fi kadar yayg\u0131n de\u011fil.<\/p>\n\n\n\n
Windows 11 kullan\u0131c\u0131 say\u0131s\u0131 beklentilerin alt\u0131nda kald\u0131<\/a><\/a><\/p>\n\n\n\n \u00d6rne\u011fin, Microsoft Edge parolalar\u0131, Veri Koruma Uygulamas\u0131 Programlama Arabirimi (DPAPI) arac\u0131l\u0131\u011f\u0131yla y\u00f6netilen anahtarlarla korunur. Bu anahtar TPM taraf\u0131ndan korunuyorsa, sald\u0131rgan disk g\u00f6r\u00fcnt\u00fcs\u00fc \u015fifrelenmemi\u015f olsa bile disk g\u00f6r\u00fcnt\u00fcs\u00fcn\u00fc analiz edemez ve parolay\u0131 web taray\u0131c\u0131s\u0131nda alamaz. Ancak, Windows 11’de bile bu DPAPI anahtar\u0131 TPM taraf\u0131ndan korunmaz ve bir sald\u0131rgan, Microsoft Edge taraf\u0131ndan t\u00fcm kullan\u0131c\u0131n\u0131n parolalar\u0131n\u0131 depolamak i\u00e7in kullan\u0131c\u0131n\u0131n Windows hesab\u0131 parolas\u0131n\u0131 kullanabilir.<\/p>\n\n\n\n Microsoft, parolas\u0131z Windows kimlik do\u011frulamas\u0131 i\u00e7in yeni bir se\u00e7enek sunarak bu sorunu \u00e7\u00f6zmeye \u00e7al\u0131\u015f\u0131yor. t\u00fcm DPAPI anahtarlar\u0131n\u0131 TPM’ye ta\u015f\u0131mak yerine TPM korumas\u0131yla, parola do\u011frulamas\u0131 olmadan, parolalar veya PIN’ler bilgisayar\u0131n sabit s\u00fcr\u00fcc\u00fcs\u00fcnde depolanmaz, yaln\u0131zca bir karma i\u015flevi (karma i\u015flevi veya karma i\u015flevi: de\u011fi\u015fken uzunluklu verileri sabit uzunluklu verilerle e\u015fle\u015ftirmek i\u00e7in Kullan\u0131lan i\u015flev) ge\u00e7erlidir veya uygulanmaz. Anahtarlar, bildi\u011fimizden daha az g\u00fcvenli olmayan TPM veya \u00fcr\u00fcn yaz\u0131l\u0131m\u0131 \u00f6yk\u00fcnmesi ile korunur.<\/p>\n\n\n\n Bunun \u00f6nemli sonu\u00e7lar\u0131 vard\u0131r. Her \u015feyden \u00f6nce, \u00e7evrimd\u0131\u015f\u0131 kaba kuvvet sald\u0131r\u0131lar\u0131n\u0131n ilgili hesaplar\u0131n \u015fifrelerine ve PIN’lerine kar\u015f\u0131 kullan\u0131lamayaca\u011f\u0131 a\u00e7\u0131kt\u0131r. <\/p>\n\n\n\n Windows 11 \u00e7al\u0131\u015ft\u0131ran bilgisayar\u0131n\u0131z parolas\u0131z oturum a\u00e7ma ile etkinle\u015ftirildiyse \u015fifresi olmayan bir hesab\u0131 yerel bir Windows hesab\u0131na d\u00f6n\u00fc\u015ft\u00fcrmek ve bu hesaba bilinen bir \u015fifre atamak teknik olarak m\u00fcmk\u00fcnd\u00fcr. Ancak, bu yap\u0131ld\u0131ktan sonra, DPAPI anahtarlar\u0131 kaybolacak, bu da bir\u00e7ok korunan bilginin (Edge parolalar\u0131 ve NTFS \u015fifreli dosyalar dahil) bu d\u00f6n\u00fc\u015ft\u00fcrmeden sonra kal\u0131c\u0131 olarak i\u015fe yaramaz hale gelece\u011fi anlam\u0131na geliyor. <\/p>\n\n\n\n Evet ve Hay\u0131r. Bu soruyu tam olarak yan\u0131tlamadan \u00f6nce, Windows 11’deki TPM gereksinimlerinin BitLocker otomatik sistem b\u00f6l\u00fcm\u00fc \u015fifrelemesine ba\u011fl\u0131 oldu\u011funa dair yayg\u0131n bir yan\u0131lg\u0131dan kurtulmam\u0131z gerekiyor. Ger\u00e7ekte, durum hi\u00e7 de b\u00f6yle de\u011fil.<\/p>\n\n\n\n Windows 11’in varsay\u0131lan \u015fifreleme ilkesi, Windows 10’da (ve ondan \u00f6nceki Windows 8.1’de) g\u00f6rd\u00fc\u011f\u00fcm\u00fczden biraz farkl\u0131d\u0131r. Windows’un herhangi bir s\u00fcr\u00fcm\u00fcne sahip diz\u00fcst\u00fc bilgisayarlar ve 2’si 1 arada ayg\u0131tlar gibi \u00e7o\u011fu ta\u015f\u0131nabilir ayg\u0131t BitLocker Ayg\u0131t \u015eifrelemesi ile otomatik olarak \u015fifrelenirken, TPM’den veya y\u00fckseltmelerden veya Windows 11’in yeni y\u00fcklemelerinden ba\u011f\u0131ms\u0131z olarak masa\u00fcst\u00fc bilgisayarlar i\u00e7in durum b\u00f6yle de\u011fildir. Windows 11 Pro, Enterprise ve Education s\u00fcr\u00fcmlerinin kullan\u0131c\u0131lar\u0131; Sistem b\u00f6l\u00fcm\u00fcn\u00fc manuel olarak \u015fifreleyebilmelerine ra\u011fmen, Windows 11 Home s\u00fcr\u00fcm\u00fc kullan\u0131c\u0131lar\u0131 bu se\u00e7ene\u011fe sahip olmayacakt\u0131r.<\/p>\n\n\n\n Windows sistem b\u00f6l\u00fcm\u00fcnde BitLocker \u015fifrelemesi etkinle\u015ftirilmi\u015fse, gerekli hesap veritaban\u0131 dosyalar\u0131na eri\u015fmek i\u00e7in \u00f6nce BitLocker biriminin kilidini a\u00e7man\u0131z gerekir. Windows 11 i\u015fletim sistemi varsay\u0131lan olarak TPM gerektirdi\u011finden, TPM’nin y\u00fcklendi\u011fini (adanm\u0131\u015f ve t\u00fcmle\u015fik TPM ayg\u0131tlar\u0131 veya CPU \u00f6yk\u00fcnmesi aras\u0131nda neredeyse hi\u00e7bir fark yoktur) ve \u015fifreleme anahtar\u0131n\u0131n TPM’de depoland\u0131\u011f\u0131n\u0131 varsayabiliriz. Bilgisayar\u0131 farkl\u0131 bir i\u015fletim sistemiyle ba\u015flat\u0131rsan\u0131z, TPM \u015fifreleme anahtar\u0131 g\u00f6r\u00fcnmez. Disk \u015fifreleme i\u00e7in parola korumas\u0131 kullan\u0131lmad\u0131\u011f\u0131ndan, TPM tabanl\u0131 sistemler parolay\u0131 almak i\u00e7in sald\u0131r\u0131 ger\u00e7ekle\u015ftiremez.<\/p>\n\n\n\n Bu BitLocker birimlerinin kilidini a\u00e7man\u0131n tek yolu BitLocker Kurtarma Anahtar\u0131d\u0131r. BitLocker \u015fifrelemesi olan mobil cihazlar i\u00e7in, sistem b\u00f6l\u00fcm\u00fc \u015fifrelendi\u011finde Windows otomatik olarak bir kurtarma anahtar\u0131 olu\u015fturur. Bu kurtarma anahtar\u0131, bu bilgisayarda y\u00f6netici olarak oturum a\u00e7an ve yerel bir Windows hesab\u0131 yerine Microsoft hesab\u0131 kimlik bilgilerini kullanan ilk kullan\u0131c\u0131n\u0131n Microsoft hesab\u0131na otomatik olarak y\u00fcklenir.<\/p>\n","protected":false},"excerpt":{"rendered":" Windows, \u00e7e\u015fitli g\u00f6revler i\u00e7in G\u00fcvenlik Yard\u0131mc\u0131s\u0131’n\u0131 kullanabilir. Anahtarlar\u0131n\u0131z\u0131 korumaktan cihaz\u0131n\u0131z\u0131 \u015fifrelemeye kadar. Ancak Elcomsoft’un ger\u00e7ekle\u015ftirilen testlerden edindi\u011fi izlenimlere g\u00f6re, Windows’ta TPM teknolojisinin pratik kullan\u0131m\u0131 Microsoft’un iddia etti\u011fi kadar yayg\u0131n de\u011fil. Windows 11 kullan\u0131c\u0131 say\u0131s\u0131 beklentilerin alt\u0131nda kald\u0131 \u00d6rne\u011fin, Microsoft Edge parolalar\u0131, Veri Koruma Uygulamas\u0131 Programlama Arabirimi (DPAPI) arac\u0131l\u0131\u011f\u0131yla y\u00f6netilen anahtarlarla korunur. Bu anahtar TPM taraf\u0131ndan […]<\/p>\n","protected":false},"author":10,"featured_media":27981,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[57],"tags":[5635,5634,108],"class_list":["post-27979","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nasil-yapilir","tag-tpm","tag-tpm-windows-kimlik-dogrulamasini-nasil-etkiliyor","tag-windows"],"_links":{"self":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts\/27979","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/comments?post=27979"}],"version-history":[{"count":0,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/posts\/27979\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/media\/27981"}],"wp:attachment":[{"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/media?parent=27979"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/categories?post=27979"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.indir.com\/haber\/wp-json\/wp\/v2\/tags?post=27979"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}BitLocker \u015fifreli s\u00fcr\u00fcc\u00fclerde \u00e7al\u0131\u015f\u0131r m\u0131?<\/h2>\n\n\n\n