The TPM chip will only give you the encryption key only after checking the computer’s condition. BitLocker can save the encryption key to the TPM, which is much safer than keeping it elsewhere on your hard disk. TPM is actually a microchip integrated into the computer’s motherboard.
Truecrypt or bitlocker password#
Users who have no password won’t be able to access files stored in such media.īy default, encryption with BitLocker requires a TPM module to be available on your PC, to ensure security of the system drive. You’ll be suggested to enter a password to unlock the media when you connect it to the computer. You will have to enter a password when you address such disk for the first time.įor removable devices: External media, such as USB drives and external hard disks, can be encrypted with BitLocker To Go. You can also encrypt other disks in your computer as well – it is available not only the disk with the operating system. The encryption / decryption process is on-the-go, and you can work with the computer in the same way as before encryption was enabled. After that, BitLocker decrypts the disk and starts Windows.
Truecrypt or bitlocker windows#
When the computer is turned on, the loader starts Windows from the System Reserved partition and suggests choosing a method to unlock – for example, using a password. It allows encrypting any built-in non-removable disks, system or not. There are two encryption types available: However, dynamic disks cannot be encrypted with BitLocker. I'm going to hold off on the last two for another week to monitor the system stats.Click on the option “Turn on BitLocker” next to the system drive, any logical disk or removable disk to enable encryption.
Two more drives have been fully encrypted and still everything is running fine, even on this little box. I'll post any new updates on this as I proceed more into encrypting the remaining drives in the coming weeks. This is a very small/low power server and as such my needs for speed are not huge, but so far I am happy. I was able to resolve this by adding BitLocker as a dependency to the DriveBender service. I did run into a couple of odd issues where windows would repeatedly assign it a drive letter, but I was able to resolve it by setting up a set of rules in USBDLM to ensure the drives were not given a drive letter.ĭeviceID1=USBSTOR\DISK&VEN_WDC_WD15&PROD_EARS-00MVWB0&REV_0125\152D00539000&0ĭeviceID2=USBSTOR\DISK&VEN_WDC_WD50&PROD_00AAJS-22TKA0&REV_0125\152D00539000&1ĭeviceID3=USBSTOR\DISK&VEN_WDC_WD30&PROD_EFRX-68EUZN0&REV_\152D20339006&0ĭeviceID4=USBSTOR\DISK&VEN_WDC_WD30&PROD_EFRX-68AX9N0&REV_\152D20339006&1ĭeviceID5=USBSTOR\DISK&VEN_WDC_WD30&PROD_EFRX-68AX9N0&REV_\152D20339006&2ĭeviceID6=USBSTOR\DISK&VEN_WDC_WD30&PROD_EFRX-68EUZN0&REV_\152D20339006&3Īfter that, I noticed there was a bit of a timing issue that resulted in DriveBender loading and not detecting the encrypted drive until after a few moments, even when the drive is automatically unlocked at boot. I must say that any slowdown is negligible for my needs and all is working well.
So far I have started small and only encrypted the landingzone, as it would see the most R/W and allow me to see the performance.
Truecrypt or bitlocker windows 7#
Atom D525 CPU / 4GB ram / Windows 7 圆4 Ultimate.I recently decided to give BitLocker a go with my DriveBender Pool and wanted to report what I have seen so far, but first some details about my setup. When you say you looked in the command line, did you look into powershell scripting? I haven't looked too far into it bit there is a Windows Management Object (WMI) for managing Bitlocker drives which can be called from powershell or C#. I think that allowed drives to be automatically unlocked (but I never tried it so I might be wrong).
It was mostly concerned with disk health (smart) monitoring but it also had a tab to manage bitlocker. Unfortunately it's not available any more but there used to be an addin for Windows Home Server 2011 called Home Server Smart. Q2: Have you encrypted your System drive with Bitlocker and the same PW as the data drives?įor drives to unlock automatically the system drive needs to be encreypted (because that's where the keys are stored) and to unlock the system drive, at least on my system (it might be diferent on systems with hardware TPM), there has to be a USB stick "key" present when the system boots up. Q1: How do you unlock the drives when they don't have a drive letter? When I researched the topic, I came up blank when looking for some command line option to unlock a drive without a drive letter. Tomper - many thanks for your experience report on Bitlocker and Drivebender! Very promising
0 kommentar(er)
