General question regarding Bitlocker feature

[yaronkadem]

Hi All,

I have two questions regarding Windows 7 Bitlocker feature.

I do want to work with a Bitlocker drive but I have some concerns about it.

1. My first one comes from paranoia, In what cases I might be unable to access my Bitlocker drive and lose all my content stored in it, at the moment, in order to access my Bitlocker drive I need to provide only my password (no additional authentication such as USB-key needed) and I do have my Bitlocker recovery key stored in a safe place.

2. How do I find if my computer has a TPM chip in it? I was able to have a Bitlocker drive without any issues and without changing anything in gpedit.msc and registry.


Thanks
Shay

 

[logicearth]

Concerning point number one...did you have a question or just making a statement?

As for number two...if your computer didn't have a TPM chip when configuring Bitlocker it would have told you.
Of course that is if you used Bitlocker and not Bitlocker-To-Go.

 

[yaronkadem]

Hi,

thank you for your answer and sorry for my late reply.

Yes, it should have been a question. it would have been more clean if I added a question mark.


Thanks

Concerning point number one...did you have a question or just making a statement?

As for number two...if your computer didn't have a TPM chip when configuring Bitlocker it would have told you.
Of course that is if you used Bitlocker and not Bitlocker-To-Go.

 

[severedsolo]

Concerning point 1, You don't state whether it is an OS drive, or a Data drive you hav encrypted, but for these purposes I'm going to go ahead and assume it's a Data drive as you said you have to put a password in

Basically, the only way you would lose the data, is if you both
a) Forgot the password
b) Lost the recovery key

The recovery key basically works in the same way as the password, if you did forget the password for whatever reason, you would have to input the recovery key which would then unlock the drive. From there you could change the password, (may or may not need to be decrypted/reencrypted can't remember)

Of course if the harddrive failed you'd lose it anyway.... but that's gonna happen if you encrypt it or not

Concerning point 2: Actually, Bitlocker will let you do it by default on any drive apart from the OS drive without a TPM, if you want to know whether you have a TPM, then the quickest and easiest way to find out is:

Open computer and right click C:
Click Turn on Bitlocker
Bitlocker will now check whether you have a TPM,

This is where it gets a little confusing, back in the day, By default it would not let you do it without a TPM, you had to unlock the option in Group Policy, however I just tried it, and it let me, eeven though I am pretty sure I haven't touched the option.

So basically, it will either, refuse to do it, or it will do it but only give you the option of creating a Startup key, if it exibits ANY other behaviour (IE gives you more options), then you have a TPM,

You can cancel the screen if you don't want to encrypt it by the way