Apply BitLocker under Windows Vista

With the vigorous promotion of Microsoft, many friends have already used Windows Vista, different users for Vista nature has different needs, individual users are more concerned about the United States and the United States more interesting aero effect, and enterprise users are more concerned about Vista security performance. If you are using Windows Enterprise Vista (Enterprise Version) or Windows Ultimate Vista (the flagship version), you can gain unprecedented security through the "BitLocker" standard components that you provide.

I. The principle of BitLocker work

During Windows Vista research, Microsoft has broken new system research to address Windows XP security issues, and has shifted to fixing Windows XP security issues, the SP2 patch package that everyone is now familiar with. For hackers who understand a bit of expertise, the Windows XP account password can be cracked without much effort, stealing data from the computer, which is called an offline attack. In other words, the attacker is directly using your computer to invade. So, in Windows Vista, Microsoft is naturally very much in security, and BitLocker was born in a situation where it complements EFS and uses hardware and software to protect hard disk data.

Here's a brief overview of how BitLocker works, and BitLocker's encrypted disk or disk partitions are bundled with the TMP chip (or USB flash) on the motherboard. So, even if someone steals the data, it will ensure that the data is no longer offline because it is not able to decrypt the computer's BitLocker encrypted data on other computers.

The full name of the TPM is trusted Platform module, which allows you to trust the Security Platform module. The TPM can be used for key generation and storage, and many notebook computers now build Vista security with built-in TPM-spec chips. For computers that do not have TPM hardware, BitLocker can also store the encrypted information in the USB flash memory, of course, because of the USB flash move undefined undefined dynamic, if the USB flash memory inadvertently lost, then the computer encrypted data can not be read correctly.

Second, prepare for work

We need to install the relevant updates before we use the BitLocker feature formally. Go to the Windows Update window, select View available updates, check the BitLocker and EFS Enhancements checkbox here, and then click the Install button in the lower-right corner, and the system automatically downloads and installs the updates. After the update installation is complete, we can see the "BitLocker Drive preparation Tool (KB933246)" and "Secure Online Key Backup (KB932926)" Two updates in the Installed Updates list box.

Now, go to the Security window in Control Panel, where we can find two items for BitLocker Drive Encryption and key secure online backup.

Because computers that currently support the TPM can be said to be very small (only in some high-end products), so if we now go to use BitLocker, then the encryption drive will be prompted with a yellow warning message that the TPM is not found. Since the drive cannot be encrypted through the TPM for the reasons mentioned earlier, you can only consider choosing a USB-mode BitLocker. However, Windows Vista is automatically disabled for USB mode by default, please follow the steps below to enable it manually:

Step 1 Press the "WIN+R" key combination to open the Run dialog box, or directly activate the "Start Search" box, enter "Gpedit.msc" into the Group Policy Object Editor, step into the "Computer Configuration → Administrative Templates →windows component →bitlicker Drive Encryption."

Step 2 in the right pane, double-click Control Panel Settings: Enable advanced startup options, select Enabled, and the following "Allow BitLocker when there is no compatible TPM" option is automatically checked, and finally click the Apply button in the lower-right corner.

Step 3, go to the Security window in Control Panel, click BitLocker Drive Encryption, click Enable BitLocker in the pop-up window, and now you can see a completely different interface.