Security Basics mailing list archives

Re: MS Vista BitLocker - volume or drive?


From: "Ali, Saqib" <docbook.xml () gmail com>
Date: Fri, 23 Mar 2007 15:22:40 -0700

it depends on how you set it up.....

If you don't have TPM on your computer, and DON'T want to use a USB
Drive for a Startup key, then you are limited to volume encryption.
i.e. you partition your drive in 2, and encrypt one of the volume. The
unencrypted volume contains the start-up files.

Three alternatives for using BitLocker are:

1) Partition the HDD in 2, and encrypt one volume. This is useful if
you don't have TPM.
2) Use TPM to wrap + bind + store the encryption key
3) Use USB Drive to store the encryption key and startup files.

saqib
http://www.full-disk-encryption.net


Current thread: