PC Review


Reply
Thread Tools Rate Thread

Bitlocker and a second hard drive

 
 
=?Utf-8?B?QmlsbA==?=
Guest
Posts: n/a
 
      19th Nov 2007
I have two hard drives. One has been partitioned for Bitlocker.

The backup goes to the second hard drive (E. If the laptop is stolen can
the E: drive be swapped without bitlocker key and then give up the secrets of
its backup of the bitlocker protected drive? Or is there something expected
between the Bitlocker drive protected and the unprotected drive, disallowing
it to work if compromised?

Thanks


--
Bill
 
Reply With Quote
 
 
 
 
=?Utf-8?B?SmVzcGVy?=
Guest
Posts: n/a
 
      19th Nov 2007
Yes, if you have a system backup on an external drive then that will give up
the secrets if it is stolen. It doesn't even need to be stolen with the
computer for that to happen.

In Vista SP1 you will supposedly be able to encrypt that drive as well.
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"Bill" wrote:

> I have two hard drives. One has been partitioned for Bitlocker.
>
> The backup goes to the second hard drive (E. If the laptop is stolen can
> the E: drive be swapped without bitlocker key and then give up the secrets of
> its backup of the bitlocker protected drive? Or is there something expected
> between the Bitlocker drive protected and the unprotected drive, disallowing
> it to work if compromised?
>
> Thanks
>
>
> --
> Bill

 
Reply With Quote
 
Alun Jones
Guest
Posts: n/a
 
      19th Nov 2007
"Jesper" <(E-Mail Removed)> wrote in message
news:922DA0E0-9FBE-4D47-9117-(E-Mail Removed)...
> Yes, if you have a system backup on an external drive then that will give
> up
> the secrets if it is stolen. It doesn't even need to be stolen with the
> computer for that to happen.
>
> In Vista SP1 you will supposedly be able to encrypt that drive as well.


If you're willing to run "cscript c:\windows\system32\manage-bde.wsf", you
can encrypt drives other than the boot drive in Vista without SP1. Vista SP1
will, I imagine, merely provide a GUI wrapper around this facility.

Alun.
~~~~


 
Reply With Quote
 
=?Utf-8?B?SmVzcGVy?=
Guest
Posts: n/a
 
      21st Nov 2007
It's just that it is unsupported to encrypt non-boot volumes in Vista RTM.
That's why I did not mention it. The plan, last I heard, was to support it in
SP1.

---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"Alun Jones" wrote:

> "Jesper" <(E-Mail Removed)> wrote in message
> news:922DA0E0-9FBE-4D47-9117-(E-Mail Removed)...
> > Yes, if you have a system backup on an external drive then that will give
> > up
> > the secrets if it is stolen. It doesn't even need to be stolen with the
> > computer for that to happen.
> >
> > In Vista SP1 you will supposedly be able to encrypt that drive as well.

>
> If you're willing to run "cscript c:\windows\system32\manage-bde.wsf", you
> can encrypt drives other than the boot drive in Vista without SP1. Vista SP1
> will, I imagine, merely provide a GUI wrapper around this facility.
>
> Alun.
> ~~~~
>
>
>

 
Reply With Quote
 
Alun Jones
Guest
Posts: n/a
 
      26th Nov 2007
Good point - even the API that manage-bde.wsf uses documents that
encryption of drives other than the "currently running operating system
volume" is not supported.

I'm looking forward to seeing this supported in future versions of Vista.

Alun.
~~~~

"Jesper" <(E-Mail Removed)> wrote in message
news:5C62A0D4-0BC1-4360-ADD9-(E-Mail Removed)...
> It's just that it is unsupported to encrypt non-boot volumes in Vista RTM.
> That's why I did not mention it. The plan, last I heard, was to support it
> in
> SP1.
>
> ---
> Your question may already be answered in Windows Vista Security:
> http://www.amazon.com/gp/product/047...otectyourwi-20
>
>
> "Alun Jones" wrote:
>
>> "Jesper" <(E-Mail Removed)> wrote in message
>> news:922DA0E0-9FBE-4D47-9117-(E-Mail Removed)...
>> > Yes, if you have a system backup on an external drive then that will
>> > give
>> > up
>> > the secrets if it is stolen. It doesn't even need to be stolen with the
>> > computer for that to happen.
>> >
>> > In Vista SP1 you will supposedly be able to encrypt that drive as well.

>>
>> If you're willing to run "cscript c:\windows\system32\manage-bde.wsf",
>> you
>> can encrypt drives other than the boot drive in Vista without SP1. Vista
>> SP1
>> will, I imagine, merely provide a GUI wrapper around this facility.
>>
>> Alun.
>> ~~~~
>>
>>
>>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Bitlocker on Flash Drive? Domenick Windows Vista General Discussion 3 15th May 2010 09:06 PM
Restored Factory Settings on Laptop that had BitLocker - Now want to do bitlocker again Blake Mengotto Windows Vista General Discussion 0 24th Aug 2008 09:39 PM
Bitlocker, SP1 - Encrypting Second Drive Kevin Young Windows Vista Security 3 25th Dec 2007 12:17 AM
Drive encryption / bitlocker John Windows Vista File Management 0 12th May 2007 04:41 PM
BitLocker and hard drives using the T13/T10 TRUSTED commands Gary G. Little Windows Vista Security 5 11th Jul 2006 07:44 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 08:12 AM.