Els's blog

Monday, December 04, 2006

Bitlocker for Data Partitions

Vista does not support encryption of data partitions using BDE. (Longhorn server will have full support for this feature.)

But if you really want to protect your data with Bitlocker, there is a way! You have to use the same method as described in my previous post: manage-bde.

And what about unlocking this encrypted data drive?
That will not happen automatically. If you reboot your machine after the encryption process, you will no longer be able to access your files.

Your decryption options:

  1. Manually
    cscript manage-bde.wsf -unlock E: -rk "path to encryption key (.bek file)"
    You will have to run this command after every reboot.
  2. Automatically
    cscript manage-bde.wsf -autounlock -enable E:
    This command will create an external key protector on the data volume and stores the associated external key onto the bitlocker-protected OS volume. For this to work, your OS volume has to be encrypted with BDE too.

Happy encrypting!

3 Comments:

Post a Comment

<< Home