[Explaining-5] BitLocker

Tag: blank target style title share

Pioneer conditions

I lazy, do not hit so many words, to the Internet to find a useful picture posted out share to everyone.

650) this.width=650; "height=" 472 "title=" clip_image002 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image002 "src=" http://s3.51cto.com/wyfs02/ M01/6c/6b/wkiol1vjd7zgmuoxaahb9zktj8a162.jpg "border=" 0 "/>

[If you are installing a previous operating system for Windows Server 2008, the system does not automatically create 2 disk partitions, so you need the next tool on the Microsoft website, BitLocker Drive Preparationtools, which divides 2 extents, Keep the operating system at the same time.]

The default system only supports the TPM mode of BitLocker, if you want to bit the people now support to store the key to the USB stick, then you need to modify the value of the Group Policy "require additional authentication at startup"

Look at the path to the Group Policy:

650) this.width=650; "height=" 365 "title=" clip_image004 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image004 "src=" http://s3.51cto.com/wyfs02/ M02/6c/6b/wkiol1vjd72wuotnaadcogn01mu543.jpg "border=" 0 "/>

650) this.width=650; "height=" 465 "title=" clip_image006 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/ M02/6c/70/wkiom1vjdk3qxwfaaaiolez_sx8913.jpg "border=" 0 "/>

Encrypt with BitLocker

Windows server needs to manually add the BitLocker service to restart the server

650) this.width=650; "height=" "title=" clip_image008 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image008 "src=" http://s3.51cto.com/wyfs02/ M00/6c/70/wkiom1vjdk6roxipaadiiyhozjw279.jpg "border=" 0 "/>

Bitlocker can encrypt the drive (disk), or it can encrypt the USB stick

650) this.width=650; "height=" 438 "title=" clip_image010 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image010 "src=" http://s3.51cto.com/wyfs02/ M01/6c/70/wkiom1vjdk_qsn9naagi3gnm9kw474.jpg "border=" 0 "/>

Here I only encrypt the E-disk, if you want to automatically unlock the e-disk, you must also encrypt the C disk

650) this.width=650; "height=" 262 "title=" clip_image012 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image012 "src=" http://s3.51cto.com/wyfs02/ M02/6c/70/wkiom1vjdlgxua76aabz3n9yolc554.jpg "border=" 0 "/>

650) this.width=650; "height=" 302 "title=" clip_image014 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image014 "src=" http://s3.51cto.com/wyfs02/ M00/6c/6b/wkiol1vjd8tzq_2qaad-sxayioc128.jpg "border=" 0 "/>

Save Recovery key

This is important because when you replace the hardware, you cannot start the system, and the user must provide the repair key according to the requirements of BitLocker, and BitLocker will only meet to decrypt the disk and start the system.

Although the USB flash drive does not check if the startup environment has changed, you still need to create a repair key to prevent BitLocker from decrypting the disk with the decryption key for some reason.

650) this.width=650; "height=" 273 "title=" clip_image016 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image016 "src=" http://s3.51cto.com/wyfs02/ M00/6c/70/wkiom1vjdlsz6skwaacgiism3gw399.jpg "border=" 0 "/>

650) this.width=650; "height=" 137 "title=" clip_image018 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image018 "src=" http://s3.51cto.com/wyfs02/ M02/6c/6b/wkiol1vjd8fazpu-aaa_1dlgwhe942.jpg "border=" 0 "/>

650) this.width=650; "height=" 155 "title=" clip_image020 "style=" border:0px;padding-top:0px;padding-right:0px; Padding-left:0px;background-image:none, "alt=" clip_image020 "src=" http://s3.51cto.com/wyfs02/M02/6C/6B/ Wkiol1vjd8jyhnhfaacwcgxefc4622.jpg "border=" 0 "/>

Enter the decryption key to enter the E-drive

Summarize

In general, BitLocker produces a decryption key, and finally a recovery key to prevent the decryption key from being lost.

This article from the "Erick" blog, declined to reprint!

[Explaining-5] BitLocker