Re: MS Vista BitLocker - volume or drive?



it depends on how you set it up.....

If you don't have TPM on your computer, and DON'T want to use a USB
Drive for a Startup key, then you are limited to volume encryption.
i.e. you partition your drive in 2, and encrypt one of the volume. The
unencrypted volume contains the start-up files.

Three alternatives for using BitLocker are:

1) Partition the HDD in 2, and encrypt one volume. This is useful if
you don't have TPM.
2) Use TPM to wrap + bind + store the encryption key
3) Use USB Drive to store the encryption key and startup files.

saqib
http://www.full-disk-encryption.net



Relevant Pages

  • Re: Why not encrypt the whole Hard Drives?
    ... Seagate drives and/or the machines that use the TPM chips impose the ... what the administrative overhead is ... encryption key using the TPM will impose any overhead, ... > Cost and performance impact are the usual arguments. ...
    (Security-Basics)
  • Re: Data Salvage protected folder HELP!
    ... > external USB setup to allow me to acceess and copy all of my pertinent ... An easy way to retrieve Windows files is to boot with Knoppix, ... http://www.beginningtoseethelight.org/efsrecovery/ - more encryption ...
    (microsoft.public.windowsxp.security_admin)
  • Re: usb flash disk, ext3 file systems, enforcing rights, security
    ... and I've also recently lost my USB flash drive. ... What I did was wipe the partitions and create 2 new ones, one for vfat, ... vfat partition, and everything else in the protected area. ... vfat and the other "83" for use with encryption. ...
    (Fedora)
  • Re: How to Facilitate and Use Data Protection on DOM (WinCE 6.0)
    ... encryption on and off, while still having the filter load. ... Decryption in my file system filter seems to work fine but the 2nd ... FS filter is NOT APPLIED to Removable USB ... Hard Disk as well as the Removable USB media. ...
    (microsoft.public.windowsce.platbuilder)
  • Re: How to Facilitate and Use Data Protection on DOM (WinCE 6.0)
    ... encryption on and off, while still having the filter load. ... Decryption in my file system filter seems to work fine but the 2nd ... FS filter is NOT APPLIED to Removable USB ... Hard Disk as well as the Removable USB media. ...
    (microsoft.public.windowsce.platbuilder)