How to Use BitLocker In Windows 8

300x250

Microsoft | Sofware |How to Use BitLocker In Windows 8 | Guidance Using BitLocker In Windows 8 Tutorial Using BitLocker In Windows 8 Tips and Tricks Using BitLocker In Windows 8, Windows 8 BitLocker. The first is Pre-provisioning BitLocker. Pre-Provisioning allows the administrator to enable BitLocker on the drive before Windows 8 even installed on the PC. The importance of this feature is to drastically reduce the amount of time that users must wait before getting to work. Previous versions of Windows required the user to wait until after the OS is installed, BitLocker is enabled, and the entire drive is encrypted before they can start using the PC. Now it is possible to drive for encryption with a clear protective generated randomly, as Microsoft calls it, before installation so that after installation with user encryption key only finalization fully encrypted.

Options for encryption

Next on the list of improvements is the ability to encrypt only the used space. This represents a big change as far as productivity is concerned. Consider this example for a moment:

In Windows 7 if you have a 2 TB drive with 1GB used and turning on BitLocker, you will see all encrypted 2TB. The same scenario in Windows 8 can take only 1/2000 the time. This gem is the secret behind the change in Pre-Provisioning only take a matter of seconds in some scenarios.

With Windows 8, non-admin users now have the ability to change the BitLocker encryption PIN on their PC. Signifikansnya here is that the administrator can now set the initial PIN general in Windows image and then allow the user to change the PIN to something unique. Of course, this is a pro-con scenario. This sure makes it easy deployment concerns of IT departments, but the user is always the weakest link in the security chain. Allowing them to change the BitLocker PIN results in brief, the PIN is not secure.

The solution here is to consider your environment and requirements. If the risk is not worth the reward using standard Disallow users from changing the PIN or password settings in the Group Policy. Find this setting stay on the computer Configuration \ Administrative Templates \ Windows Components \ BitLocker Drive Encryption \ Operating system drive GPO container.

preparation

Turning on BitLocker Windows 8 is simple and straightforward. Start by opening the charm bar, click on the Search charm, BitLocker enter search text, and then click Settings. Click BitLocker Drive Encryption in the results list and you will be taken to the BitLocker Drive Encryption Control Panel Applet.

BitLocker Drive Encryption Control Panel Applet shows PC hard drives, including removable storage such as USB keys and the like. Like I said, this is as simple as clicking the Enable BitLocker next to the drive letter to be encrypted. BitLocker will perform a quick system check, and if all goes well it will be asked how you want to open the drive. If you want to use a password and then select the options that you will be prompted to enter and confirm the password and click Next.

The next step is very important. BitLocker need to know where to back up the recovery. Recovery button is the only absolute way to unencrypt your drive if the wrong password. No password or key drive recovery may also be Frisbee.

Due to these important factors, I strongly suggest saving up to Microsoft Accounts keys, USB drive, or network share.

Possible to back up the recovery key to Active Directory if you are working in a domain environment. Recovery of information stored in a computer object, but it's another article topic.

Now that the recovery is supported - you do back up, right? Choose how to encrypt the drive. Option is only used disk space or entire drive. I suggest that disk space is used only as an option that is much faster and one of the benefits for BitLocker Windows 8.

Are you ready to encrypt this drive? Click Continue and let BitLocker to work. You will be prompted to restart the computer and after popping back to the desktop, the drive will start encryption. There is really nothing more than that!

What could go wrong?

Before I go let you believe always sunshine and roses I should mention that you can sometimes run into obstacles or two. Do not worry, they do not occur regularly and usually not too difficult to complete.

One of the most common situation is to pop up an error when you try and turn on BitLocker that "this device can not use the trusted platform module." It usually means you're using an older computer or operating in a virtual environment. If this happens to you, click Cancel, run gpedit.msc to edit Group Policy, navigate to Computer Configuration container \ Administrative Templates \ Windows Components \ BitLocker Drive Encryption \ Operating system drive and double-click requires additional authentication at startup policy.

The next step will probably jump out at you; tick the box next to enable BitLocker without a compatible TPM, and then click OK.

Gpedit.msc out and good to wait patiently until the next automatic update group policy, or impatient like me and run gpupdate / from the Command Prompt. Either way, after the Group Policy Update wizard you can start BitLocker Drive Encryption without worrying about pesky mistakes that get in your way again.

(iklan)