 |
 |
 |
A best practice guide on how to configure BitLocker (Part 1)
Monday, January 8th, 2007
Windows Vista is here, and with Vista we get a lot of new exciting security features. One of the most exciting security features in 
Vista is Windows BitLocker drive encryption. BitLocker is a full-volume encryption tool that supports custom protection and authentication methods. However the user and support experience can be a mixed blessing, depending on which protection and authentication methods you choose. In this article we’ll walk you through a best-practice step-by-step approach on how to install and configure BitLocker in Windows Vista.
With BitLocker you basically have two different ways to protect the crypto key (a.k.a. Volume Encryption Key).
* A TPM chip
* Using a clear key, which is simply a normal password protection method
The crypto key is used to encrypt a volume, but it is just as important that the crypto key is protected as well. If a malicious user deletes the crypto key or it is accidentally deleted, then you better have a good key recovery setup, assuming you want access to your data again (We’ll cover the key recovery part in more details in Part 2). On the positive side, deleting the crypto key on purpose, in a controlled environment, is a great way to decommission and quickly recycle a computer without having to worry about what was installed previously on the encrypted volume. A best practice guide on how to configure BitLocker (Part 1)
Popular Posts
Please read our Disclaimer
