Thread: Bitlocker
View Single Post
  #7 (permalink)  
Old September 8th 06, 06:13 AM posted to microsoft.public.windows.vista.security
Jamie Hunter [MS]
external usenet poster
 
Posts: 39
Default Bitlocker

A couple of clarifications on BitLocker for you regarding your questions on
this thread:

(1) How to read the disk in another computer for restore purposes

For this scenario, a USB key or password is required. The "manage-bde"
command line interface, which wraps around the WMI interface, is the most
powerful way to address all desired restore scenarios.

(2) Can a thief read a TPM protected disk?

In the TPM-only case, the TPM is protecting the OS. Although the OS has full
access to the data because the OS has the key, it is protecting access to
the disk. For this security to work successfully, it is important that the
logon password is strong. I.e. a blank password would allow the thief access
to the data .
In summary, TPM ensures OS cannot have the key if it is cracked. IS has key
if the OS is not cracked. Thief cannot get key without cracking OS.

TPM+USB or TPM+PIN does provided extra security depth, however these usually
have a usability pain factor associated with them.
-
Jamie Hunter [MS]
----


"Or Tsemah" wrote in message
...
I have two question that i need to clarify?
First, How not having a TPM chip affects bitlocker? is it the early-boot
component that i require? because i understand that i CAN use a USB for
this

Second, if i take a Bitlocker encripted disk and plug it as a secondary
drive on another computer, how can i read it (For restore purposes)

Thanks.
Or.