The OS drive must be protected by Bitlocker to automatically unlock.

[PartyCat]

Hey, I'm trying to configure my secondary internal HDD to lock with bitlocker, since acronis won't back it up well with truecrypt, but I still want to encrypt my OS drive with truecrypt since I don't have a TPM, and have to use a USB key to unlock it at startup, which I think is a vulnerability since anyone can just grab my USB and plop it into the computer. Is there any way I can bypass this restriction, or even better, have BitLocker require a startup PIN without having a TPM?

 

[Dave Atkin]

Hello,

There is a turotial here:
How To Use BitLocker on Drives without TPM - How-To Geek

Dave

 

[PartyCat]

Sorry, I'm not sure you understand the question. I'm perfectly aware how to have bitlocker run without a TPM, and have already done so. What I'm wondering is how I can force bitlocker to automatically unlock a drive (ie; store the necesarry password on the OS drive so it unlocks the drive upon startup), since I do not wish to use BitLocker with just a USB Key, which I am forced to do due to lacking a TPM. If there was a way I could force bitlocker to automatically unlock the drive, possibly disguise it as a removeable data drive, similiar to a USB thumb drive (which apparantly lets me automatically unlock), or even better, a way to use a Startup PIN without a TPM, that'd be great, thanks.

 

[Dave Atkin]

Hi, I didnt ask a question. Maybe thats why you dont understand it.

Bitlocker is pointless if you want the OS to unlock the drive when it boots. You may aswell not have bitlocker on the PC.


Dave
The tutoria I put on the last post shows "a way to use a Startup PIN without a TPM"

 

[PartyCat]

I didn't ask for your opinion on wether or not it would be a good security measure, my OS drive is already encrypted by TrueCrypt, but my backup program apparently won't work with it for secondary HDD's, it just backs up the entire drive, so instead of having a nice, neat compressed backup file, I have a 450+ GB block of encrypted data. And I could not find where it shows how to use a Startup PIN without a TPM, only a Startup /key/, which is a USB drive, which as I explained before, I find a security vulnerability, since anyone can just pick up the USB and jam it into the computer.