Information about BitLocker

[Kohlmann]

I want to know about the BitLocker. Since you guys provide information in simple language, I thought to post here, instead of searching over an Internet. Let me tell you that I am not having enough knowledge about the BitLocker, so you can consider me newbie. Please provide some notes accordingly. Any other information that is related with the topic would be appreciable.

[Snake08]

The security mechanisms implemented by BitLocker are complemented by a new hardware security specifications called Trusted Platform Module (TPM). This new chip TPM provides a secure platform for storing keys, passwords or certificates, making it more difficult to attack them. Once the encryption mechanism has been launched, the encryption key is deleted from the disk and then stored in the TPM chip.

[Milton.J]

Windows Server Longhorn includes a new functionality in the field of data encryption BitLocker. This new system guarantees the security and confidentiality of data stored on disk using encryption. BitLocker will be responsible for performing the encryption and decryption process in a completely transparent. Additionally, unlike Windows Vista, we can extend the encryption of data to other volumes that we use for this purpose. This same mechanism is also involved when the computer enters hibernation or also to ensure the safety of the paging file, temporary files and all those elements that can contain sensitive information.

[Spyrus]

In order to defend against a possible attack on the hardware system that tries to exploit potential vulnerabilities, authentication mechanisms are provided with additional systems such as the use of Token (USB key) or a password (PIN) to avoid this possibility. It must be said here that although our equipment was not available for this security mechanism, the specifications of its functionality support BitLocker without TPM chip.

[Zachary]

The combined use of hardware and software mechanisms significantly increase the percentage chance of success when it comes to protect us from those attacks that target the modification or alteration of data. These figures could be manipulated even by exploiting vulnerabilities in order to access them later. The implementation of BitLocker requires the existence of certain conditions so that it can take effect. One factor to consider is that the system must have at least two NTFS partitions. One of them, the active partition, will host the boot system and was not encrypted. That is why BitLocker also provides mechanisms to ensure that there have been no changes to the system boot, such as those that may come from malware attacks that could produce such a collateral attack or control access to the system.

[Shen]

The implementation of BitLocker requires the existence of certain conditions so that it can take effect. One factor to consider is that the system must have at least two NTFS partitions. One of them, the active partition, will host the boot system and was not encrypted.

Implementation mechanisms may vary depending on the scenario we need to implement. Depending on it are various possibilities. Thus we can use BitLocker TPM only, with some enabling device (USB), TPM PIN or TPM enabling device (USB). The implementation of this technology will depend largely whether or not to our hardware TPM chip. If you do not take it, the only option would be the key storage device under USB.