Method for Protecting Security Accounts Manager (SAM) Files Within Windows Operating Systems

A computer usable medium having a computer program product for protecting Security Accounts Manager (SAM) files within a Windows® operating system, said computer usable medium comprising:

• program code means for generating a SAM file encryption key by encrypting a SAM file via a syskey utility provided within said Windows® operating system;
• program code means for storing said SAM file encryption key to a virtual floppy disk by selecting an option to store SAM file encryption key to a floppy disk under said syskey utility;
• program code means for generating a blob based on said SAM file encryption key by performing a Trusted Platform Module (TPM) Seal command against said SAM file encryption key along with a value stored in a Performance Control Register and a TPM Storage Root Key;
• and
• program code means for storing said blob in a non-volatile storage device of a computer.

A computer system capable of protecting Security Accounts Manager (SAM) files within a Windows® operating systems, said computer system comprising:

• means for generating a SAM file encryption key by encrypting a SAM file via a syskey utility provided within said Windows® operating system;
• a virtual floppy disk for storing said SAM file encryption key by selecting an option to store SAM file encryption key to a floppy disk under said syskey utility;
• means for generating a blob based on said SAM file encryption key by performing a Trusted Platform Module (TPM) Seal command against said SAM file encryption key along with a value stored in a Performance Control Register and a TPM Storage Root Key;
• and
• a non-volatile storage device for storing said blob.