Skip to content

TechRepublic

  • Top Products Lists
  • AI
  • Developer
  • Payroll
  • Security
  • Project Management
  • TechRepublic Academy
  • Innovation
  • Cheat Sheets
  • Cloud
  • 5G
  • Big Data
  • TechRepublic Premium
  • Top Products Lists
  • AI
  • Developer
  • Payroll
  • Security
  • Project Management
  • TechRepublic Academy
  • Innovation
  • Cheat Sheets
  • Cloud
  • 5G
  • Big Data
  • See All Topics
  • Sponsored
  • Newsletters
  • Forums
  • Resource Library
TechRepublic Premium
Join / Sign In
Microsoft

Secure your hard drive with Windows Vista BitLocker

By Jody Gilbert March 1, 2007, 3:40 AM PST

Image
1
of 12

57187.png
57187.png
Secure your hard drive with Windows Vista BitLocker

Introduction

Introduction

By George Ou

The Enterprise and Ultimate editions of Windows Vista offer BitLocker, a new data protection feature that does volume-level encryption on your hard disk drive. BitLocker complements, and in some cases replaces, Windows EFS (Encrypting File System).

In this gallery, I’ll walk through the steps for enabling BitLocker, which operates only on the Boot partition, typically the drive labeled C:.

This gallery is also available as an article and PDF download.

Secure your hard drive with Windows Vista BitLocker

Minimum requirements

Minimum requirements

Before we start, we must meet the minimum requirements for BitLocker encryption. Here are the two basic options for running BitLocker.

The 1.5 GB Active System partition is where the unencrypted bare essential bootstrap files for the Vista operating system are located. The 50 GB Boot partition is where Windows is installed and where your page files and temporary files should be located, since EFS can’t protect these things but BitLocker can.

Secure your hard drive with Windows Vista BitLocker

BitLocker Drive Preparation Tool

BitLocker Drive Preparation Tool

The best way to set this up is to create a 1.5 GB partition along with a 50 GB partition when you first install Vista. If you’re kicking yourself now because you’ve already installed Vista, don’t worry: A simple utility called the BitLocker Drive Preparation Tool can automatically redo the partitions for you. If you’ve already made the 1.5 GB partition, you’ll still need the preparation tool to transfer the necessary files from your Windows partition to the 1.5 GB partition.

To get the BitLocker Drive Preparation Tool, you can go to Windows Update and look under Vista Ultimate Extras. There, you simply check BitLocker Drive Preparation Tool to download and install.

To launch the tool, hit the Start button and type bitl. You’ll see it pop up as the first program, as shown here.

Secure your hard drive with Windows Vista BitLocker

Launching the GP Editor locally

Launching the GP Editor locally

Now, we must launch the Group Policy Editor. For individual home PCs or PCs not joined to an Active Directory, this is the local Group Policy Editor. Active Directory administrators can set this at the AD level and apply it to an Organizational Unit or an entire AD at the global level.

To launch the GP Editor locally, just hit Start and type gpedit.msc, as shown here.

Secure your hard drive with Windows Vista BitLocker

Control Panel Setup: Enable Advanced Startup Options

Control Panel Setup: Enable Advanced Startup Options

Next, we have to expand our GP Editor out to the BitLocker Drive Encryption folder, as shown here, and double-click on Control Panel Setup: Enable Advanced Startup Options.

Secure your hard drive with Windows Vista BitLocker

Allow BitLocker Without A Compatible TPM

Allow BitLocker Without A Compatible TPM

Set this control to Enabled and select Allow BitLocker Without A Compatible TPM, as shown here.

Secure your hard drive with Windows Vista BitLocker

Configure Encryption Method Properties

Configure Encryption Method Properties

Once you enable Allow BitLocker Without A Compatible TPM, click Apply and OK. Then, click on Configure Encryption Method and you’ll see the window shown here.

Secure your hard drive with Windows Vista BitLocker

Forcing the GP update

Forcing the GP update

Once you make the changes you want, hit Apply and OK and close out of the GP Editor. You can avoid a reboot if you force your machine to update its group policy with the command gpupdate /force, as shown here.

Secure your hard drive with Windows Vista BitLocker

The BitLocker Drive Encryption Tool

The BitLocker Drive Encryption Tool

Now you’re ready to launch the BitLocker Drive Encryption tool. Just press the Start button on your keyboard or desktop, type bitl, and arrow down twice to select BitLocker Drive Encryption. You should then see the screen shown here.

Secure your hard drive with Windows Vista BitLocker

Startup preferences

Startup preferences

When you click on Turn On BitLocker, you’ll see the screen shown here.

Before you continue, insert a USB data key of any size. This will essentially be the “ignition” key for your PC from this point on. Once BitLocker is enabled, you won’t be able to start your PC without this key (or some other key with a replica of the hidden information on this key). You might want to keep this USB key on your key chain instead of in the bag with your laptop in case your bag is stolen.

Secure your hard drive with Windows Vista BitLocker

The recovery password

The recovery password

The next step is to back up your password for emergency recovery using the options shown here.

You can save the backup to the same USB drive and copy it elsewhere later. If you try to save the password in a folder, you have to use a folder on a volume other than the boot volume that BitLocker encrypts. And it can’t be on the root of the volume, it must go into a folder. Enterprises can back up BitLocker passwords through Active Directory. Remember that the password isn’t the actual BitLocker key itself, but something that can derive the key.

Secure your hard drive with Windows Vista BitLocker

Encrypting the volume

Encrypting the volume

Once you finish the backup, you can encrypt the drive using these options. Simply hit Continue, and BitLocker will check your system and start encrypting your boot drive. It might take an hour or two, depending on the size of your drive and speed of your system. Then, it will reboot and prompt you for the USB key, if it isn’t already inserted. Once you reboot, you’re finished; you’ve got BitLocker running.

  • Microsoft
  • Account Information

    Share with Your Friends

    Secure your hard drive with Windows Vista BitLocker

    Your email has been sent

Share: Secure your hard drive with Windows Vista BitLocker
Image of Jody Gilbert
By Jody Gilbert
Jody Gilbert has been writing and editing technical articles for the past 25 years. She was part of the team that launched TechRepublic.
  • Account Information

    Contact Jody Gilbert

    Your message has been sent

  • |
  • See all of Jody's content

TechRepublic Premium

  • TechRepublic Premium

    Office relocation checklist

    PURPOSE New office launches and site relocations run the range from straightforward to overly complex. For intricate, sophisticated new office deployments and larger site moves, TechRepublic Premium’s Office relocation checklist can help plan, monitor and execute such projects. From the checklist: LIST REQUIRED OF EQUIPMENT AND SERVICES Begin by creating a simple list of required ...

    Downloads
    Published:  May 25, 2023, 4:00 PM EDT Modified:  May 26, 2023, 11:17 AM EDT Read More See more TechRepublic Premium
  • TechRepublic Premium

    Onboarding and offboarding IT staff checklist

    PURPOSE Onboarding and offboarding employees requires careful attention. Otherwise, team members may receive insufficient permissions to perform their jobs or continue to have access long after their employment’s termination. Given the stakes, the problem is even worse when managing IT staff permissions, so it’s imperative that your company adopts a system to ensure consistency. Employees, ...

    Downloads
    Published:  May 24, 2023, 4:00 PM EDT Modified:  May 25, 2023, 9:19 AM EDT Read More See more TechRepublic Premium
  • TechRepublic Premium

    10 must-know Firefox tips

    PURPOSE TechRepublic Premium presents 10 tips for the Firefox open-source browser. Even if you only follow some of these, you’ll find your browser experience to be much improved. From the article: 1. USE CAUTION WITH ADD-ONS AND THEMES This is one of the first tips I always offer. I’ve seen web browsers with so many ...

    Downloads
    Published:  May 23, 2023, 4:00 PM EDT Modified:  May 24, 2023, 6:46 PM EDT Read More See more TechRepublic Premium
  • TechRepublic Premium

    Bring your own device policy

    PURPOSE The purpose of this Bring your own device policy from TechRepublic Premium is to provide requirements for BYOD usage and establish the steps that both users and the IT department should follow to initialize, support and remove devices from company access. These requirements must be followed as documented in order to protect company systems ...

    Downloads
    Published:  May 22, 2023, 4:00 PM EDT Modified:  May 23, 2023, 7:26 PM EDT Read More See more TechRepublic Premium

Services

  • About Us
  • Newsletters
  • RSS Feeds
  • Site Map
  • Site Help & Feedback
  • FAQ
  • Advertise
  • Do Not Sell My Information

Explore

  • Downloads
  • TechRepublic Forums
  • Meet the Team
  • TechRepublic Academy
  • TechRepublic Premium
  • Resource Library
  • Photos
  • Videos
  • TechRepublic
  • TechRepublic on Twitter
  • TechRepublic on Facebook
  • TechRepublic on LinkedIn
  • TechRepublic on Flipboard
© 2023 TechnologyAdvice. All rights reserved.
  • Privacy Policy
  • Terms of Use
  • Property of TechnologyAdvice