iyogi Great Tech Support Good Karma
Call +877 466 7165
rss entries

BitLocker Drive Encryption in Windows 7

PoorAverageGoodVery GoodExcellent (2 votes, average: 1.50 out of 5)
Loading ... Loading ...
By admin,Friday, November 6th, 2009

Tags: , ,

BitLocker Drive EncryptionDon’t fall prey to data theft or get exposed on computers that are lost or stolen with a new feature called BitLocket drive encryption in Windows 7.

Problem:

In the absence of this feature you also face threat from drives such as USB and external storage drives.

Solution:

When you use this tool to encrypt the system drive, a Trusted Platform Module (TPM) version 1.2 can be used by BitLocket to validate that the boot components, such as BIOS, the hardware profile, and the operating system that has not been modified from the configuration that was present when the drive was unlocked. A TPM is used to store keys, passwords, and digital certificates. You can find this chip on motherboard of a computer.

If not present on the system, the operating system drive may be encrypted by using an encryption key that is stored on removable media, which must be present every time the drive is unlocked. Besides TPM additional authentication methods for example personal authentication number (PIN) and the presence of an external startup key can be required to provide multi factor authentication before unlocking the operating system drive.

BitLocker protection can be used for fixed or removable storage drives. A fixed drive is a device that is permanently fixed and cannot remove frequently from the computer. There are data drives SCSI and ATA are example of fixed storage device. Removable data drives can be removed without shutting down the computer. USB drives and memory cards are examples of removable data drives. BitLocket uses encryption keys that are derived from the operating environment. These keys can be a password or smart card.

Precaution: You should use this tool very carefully and with proper instructions. If an unlock method fails, such as if the TPM detects a change in boot components or a password is forgotten, you will need to use a recovery method to access your data.

Before starting the recovery process, you must determine that the drive was not tampered with and isolate the computer from the network until any risk presented by the system is determined. If the recovered drive is an operating system drive, the user must suspend and resume BitLocker protection to update the BitLocker profile with the changed configuration. If the OS drive boot components were changed and the computer has a TPM, the TPM should be reset by using the TPM Management snap-in. If the recovered drive was a data drive, you can use the Manage BitLocker option in the BitLocker Control Panel item to reset the unlock method.

Call +8774667165 or visit http://windows7.iyogi.net/migration/.

Windows 7 Migration

Leave a Reply