The key used for encryption is within the TPM chip and will be released to the OS loader code only if the early boot files appear to be unmodified.
Transparent: This uses capabilities of TPM 1.2 hardware to automatically log the user into Windows as normal. You can secure the encryption with one the three authentication mechanisms available Hence, in conjunction with a compatible TPM (Trusted Platform Module), it can validate the integrity of the boot and system files before proceeding to decrypt a drive.ĭisks need to be formatted with NTFS, before BitLocker can be used (FAT32 is not supported, but then NTFS is the default Windows disk format). BitLocker also has a feature to validate the integrity of the Windows Boot and system files. This software was primarily designed to protect data on devices in the event the device was lost/stolen. This is an optional feature and has to be installed through the Control Panel.īitLocker uses AES encryption in CBC (cipher block chaining) or XTS (a modification on XOR-encrypt-XOR) mode. Though it was available for regular consumers since Microsoft Vista, it has been included in server editions starting Windows Server 2012 and later. BitLockerīitLocker is a full disk encryption feature that encrypts the entire disk volume. 
There are a good number of options when it comes to full disk encryption, let’s discuss some that are free and also provide a good level of security.
While a lot of this concern is mitigated by using reliable couriers and shipping methods, it is a good practice to encrypt your disks prior to transporting your server.Īnother compelling reason you should employ disk encryption is to be compliant with laws such as GDPR (Article 25, Article 42) or when you need to get PCI (Requirement #3), HIPAA (HIPAA Security Rule) certification. A common worry when transporting servers between locations is the safety of data.
0 kommentar(er)
