Page 2 of 2 FirstFirst 12
  1.    20 Jan 2017 #11
    Join Date : Jun 2016
    Posts : 115
    Windows 10 Pro
    Thread Starter

    Bitlocker / Device Encryption difference


    Quote Originally Posted by DavidY View Post
    But Device Encryption isn't Bitlocker (albeit the underlying encryption is the same, Bitlocker gives you more control) so if you have Win10 Pro, you don't need an MS Account to use Bitlocker.
    Thank you for this. So on Windows 10 Pro I can turn Bitlocker on without needing to be logged into a MSA?

    I would want to keep a backup of the key somewhere and I am thinking I will do this on a usb drive. Is it possible to keep it on a USB drive in a way that makes that drive an 'unlock key' for the device?

    Can you explain the difference between Bitlocker and 'Device Encryption' (the latter presumably is still a Microsoft thing?) I have never understood that there were two sorts of encryption on a Windows o/s and the distinction.

    Or have I misunderstood your post?
      My ComputerSystem Spec
  2.    20 Jan 2017 #12
    Join Date : Jan 2014
    Posts : 1,391
    Windows 10 Pro (32-bit) 16299.15

    Quote Originally Posted by kevvyb View Post
    Thank you for this. So on Windows 10 Pro I can turn Bitlocker on without needing to be logged into a MSA?
    Yes - that's how I use it on my Win10 Pro laptop.

    Quote Originally Posted by kevvyb View Post
    I would want to keep a backup of the key somewhere and I am thinking I will do this on a usb drive. Is it possible to keep it on a USB drive in a way that makes that drive an 'unlock key' for the device?
    Here is a tutorial on how to switch on Bitlocker in various ways, including using a USB key to unlock.
    BitLocker - Turn On or Off for Operating System Drive in Windows 10

    Personally I would also keep other backups of the keys in addition to the USB key - the dialogs which come up allow you to print out a copy for instance. Also I'd take a backup image of the disk before I started encrypting, just in case...

    Quote Originally Posted by kevvyb View Post
    Can you explain the difference between Bitlocker and 'Device Encryption' (the latter presumably is still a Microsoft thing?) I have never understood that there were two sorts of encryption on a Windows o/s and the distinction.

    Or have I misunderstood your post?
    I believe that under the skin, the actual encryption is the same. But for Bitlocker there are more options on how you can manage that encryption.

    If a device has Device Encryption, you can switch it on or off, and backup your keys, but there isn't much more control than that.

    Some people will be running encrypted devices and won't even know it, because it runs silently when someone first logs in with an MSA with admin rights, assuming the device meets the specification and is booted with Secure Boot. I think the option about unlocking with a USB key may not be available, for example, presumably because Device Encryption runs without user interaction.

    I think that the reason Device Encryption automatically backs up keys to the MSA is because it's running silently, so the intention is that rather than relying on people keeping a backup manually, there's an automatically-created backup for if things go wrong. (Although if people close, or lose access to, their MSA, they may have a problem...)

    With the extra control in Bitlocker you have the option to backup keys to an MSA, but you have to select it - it's not automatic.
      My ComputerSystem Spec
  3.    27 Jan 2017 #13
    Join Date : Jan 2017
    Posts : 32
    Windows 10, MacOS Lion

    Quote Originally Posted by mrgeek View Post
    I have UEFI on an HP laptop that 2 yrs old and have used TrueCrypt 7.1a from Day One which I carried over from many yrs prior on other computers. Note: I use for created partitions, not the entire drive, like you propose. Let me know your results. Good Luck
    Good solution for Windows up to version 7. I love it too.
      My ComputerSystem Spec
  4.    27 Jan 2017 #14
    Join Date : Jun 2016
    Posts : 115
    Windows 10 Pro
    Thread Starter

    Quote Originally Posted by mrgeek View Post
    I have UEFI on an HP laptop that 2 yrs old and have used TrueCrypt 7.1a from Day One which I carried over from many yrs prior on other computers. Note: I use for created partitions, not the entire drive, like you propose. Let me know your results. Good Luck
    Given up with VeraCrypt as have received no response from forums.

    Something to do with UEFI boot was meant to have been fixed in 1.19 as far as I can see. I think there are still problems.
      My ComputerSystem Spec

 
Page 2 of 2 FirstFirst 12


Similar Threads
Thread Forum
Custom Boot Logo Windows 10 UEFI Boot Method? (Non-Legacy)
Is there currently any way to configure a custom boot logo for UEFI booting? I can only find methods for Legacy users, but no luck with UEFI. I'm kind of new to custom boot logos, so if anybody could give me some information as to if it's...
Customization
UEFI with Secure Boot (UEFI version) ?
I want to enable UEFI with Secure Boot and I do have an option to enable Secure Boot. But how can I tell if I am running UEFI firmware version 2.3.1.c ? Because to enable Secure Boot, machines must have UEFI firmware version 2.3.1.c I went to...
General Support
Change Boot graphic on machine without UEFI
I have a Toshiba L755-S5368 Laptop that has no secure boot anywhere in the bios. My Laptop is about 4 years old , I am trying to change the boot graphic in my machine. Can I do this ? If so, How? John
Customization
After W10 upgrade revert to W8.1 on UEFI machine
Assume a computer with the UEFI firmware interface. Assume that during or after a user has upgraded a W8.1 machine to W10 things go horribly wrong - Black screen, Blue screen, No screen. The user now tries to Boot from a USB Emergency Boot Disk...
Installation and Upgrade
Solved UEFI VM in non UEFI machine - Yes its possible
Hi there Remember if you are using VMWARE you can try out a UEFI guest even if your HOST doesn't support it. In the configuration file set the following firmware="efi" That's it !!!
Virtualization
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 11:00.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums