BitLocker Drive Encryption

[RSchwarz]

Windows BitLocker Drive Encryption (BitLocker) is a security feature in the Windows Vista and Windows Server 2008 operating systems that can provide protection for the operating system on your computer and data stored on the operating system volume. In Windows Server 2008, BitLocker protection can be extended to volumes used for data storage as well.

What does Windows BitLocker Drive Encryption do?

BitLocker performs two functions:

• BitLocker encrypts all data stored on the Windows operating system volume (and configured data volumes). This includes the Windows operating system, hibernation and paging files, applications, and data used by applications.
• BitLocker is configured by default to use a Trusted Platform Module (TPM) to help ensure the integrity of early startup components (components used in the earlier stages of the startup process), and "locks" any BitLocker-protected volumes so that they remain protected even if the computer is tampered with when the operating system is not running.

In Windows Server 2008, BitLocker is an optional component that must be installed before it can be used. To install BitLocker, select it in Server Manager or type the following at a command prompt:
ServerManagerCmd -install BitLocker -restart

Who will be interested in this feature?

The following groups might be interested in BitLocker:

• Administrators, IT security professionals, and compliance officers who are tasked with ensuring that confidential data is not disclosed without authorization
• Administrators responsible for securing computers in remote or branch offices
• Administrators responsible for servers or Windows Vista client computers that are mobile
• Administrators responsible for the decommissioning of servers that have stored confidential data

Read BitLocker Drive Encryption Overview