BitLocker-driven encryption for Windows Server 2008

BitLocker-driven encryption is a key new security feature in Windows Server 2008 that protects servers in branch offices, as well as Windows Vista Enterprise and Windows Vista Ultimate versions, for roaming users Provides protection for client computers and mobile computers. BitLocker encrypts disk-driven content, protects people running another operating system, or runs other software tools, from file destruction and system protection or offline file viewing, and files are stored in a protected drive.

BitLocker enhances data protection with two main features: System volume encryption and integrity testing for early-boot components. As long as these components are not interfered, and the encryption drive is located in the original computer, detecting the integrity of the Early-boot component helps to ensure that data encryption is performed.

BitLocker provides the option of locking the normal importer until the user provides a pin, much like the ATM card's PIN, or the user inserts a USB flash drive that includes the keying material. Enhanced security for a variety of factors and to ensure that the computer continues to work without restarting or hibernation until the correct PIN or USB flash drive is plugged in

BitLocker also provides enhanced recovery options with a disaster Recovery console that integrates into the early boot components for data patching. In the default settings, BitLocker does not require the user to act, and can automatically activate itself remotely. BitLocker provides a secure, convenient, and manageable data protection solution for the enterprise.

BitLocker addresses the threat of stealing data or being lost, stolen, or improperly shut down. In branch offices, it is important for BitLocker to address these issues because the physical security of the server is not always guaranteed. The entire system volume is encrypted, including swap and hibernation files, which provide more security for the remote servers in the branch office.