How to encrypt system partition using Bitlocker without TPM

[Bao]

Users of Windows 7 on machines that do not have TPM can use BitLocker to encrypt the system partition. Required for this storage key on a USB memory. Running the wizard on your computer integrating BitLocker without TPM 1.2 will encounter the following message:



" A compatible Trusted Platform Module (TPM) Device Service Must Be Present On this computer, but TPM was not found. Please contact your system administrator to enable BitLocker "

What is not scary That was the plan. This action is due by default Group Policy (Group Policy) for BitLocker. Follow the steps which are mentioned below:

[Techno01]

To allow the storage key on the USB drive:

• Run the Group Policy Editor "gpedit.msc".
• Go to Computer Configuration then select Administrative Templates.
• Now go to windows components and select BitLocker Drive Encryption
• After this has been done click Operating System Drives and then Additional require authentication at Startup:

• Turn on this rule (Enabled). Automatically mark the tick at "allow BitLocker without a compatible TPM (requires a startup key on a USB flash drive drive), this is what causes the settings to generate an error on the first screenshot of this entry (probably notice the curious that you can also globally disable encryption with TPM)

• After changing the settings wizard to include BitLocker drive system works:

• To continue operation, connect the USB drive:

• The above text also applies to Windows Server 2008 R2. Change can also be made by the GPO if using AD Windows Server 2008 R2. New GPO offers virtually complete control over BitLocker (a pity that so late imparted that this is earlier).