Kelly: Do you get prompted for a pin or need to insert a USB stick when you boot your computer? I know its possible to enable bitlocker on a machine without a TPM but don't know if its possible to bypass preboot authentication without a TPM. Ryan -----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Kelly Prescott Sent: Friday, May 26, 2017 10:43 AM To: Blind sysadmins list <blind-sysadmins@lists.hodgsonfamily.org> Subject: Re: [Blind-sysadmins] Setting up Bit Locker on Windows 10 You can do this without a TPM. I do mine this way so I have control over the private keys and where they can be used etc... long story short, there is a tutorial at http://www.eightforums.com/tutorials/21271-bitlocker-turn-off-os-drive-windo... It appears to be for Windows 8.1, but This worked on Windows 10 for me as well. On Fri, 26 May 2017, David Mehler wrote:
Hi,
Thanks. No go on my main machine it appears the mobo does not include a tpm chip. Two questions, can I implement bitlocker on this setup it's win10 64 bit pro? Secondly, I'm going to be getting a new motherboard, I'm needing an AMD mobo that supports an fx8120 CPU and has a tpm chip, does anyone have such a board that they can recommend?
Thanks. Dave.
On 5/26/17, Katherine M. Moss <KMoss@winterhillsolutions.com> wrote:
PowerShell can tell you. Use Get-TPM, I think ...
-----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of David Mehler Sent: Friday, May 26, 2017 10:48 AM To: Blind sysadmins list <blind-sysadmins@lists.hodgsonfamily.org> Subject: Re: [Blind-sysadmins] Setting up Bit Locker on Windows 10
Hello,
How do I tell if my machines have tpms installed?
Thanks. Dave.
On 5/26/17, Barry Toner <barry@tonermail.co.uk> wrote:
Hi,
Thanks for everyones feedback. I think I'll need to get eyes. When the system rebooted to enable the TPM it just sat there. I managed using KNFB Reader to get enough info off the screen that F2 would do something. I thumped it and it booted back to Windows with a note that the TPM hadn't been enabled in the BIOS yet. I think I'll need a pair of eyes on this.
Thanks, Barry.
-----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Katherine M. Moss Sent: Friday, May 26, 2017 1:31 PM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Setting up Bit Locker on Windows 10
I use my Latitude's TPM. I've never been prompted before to enter the recovery key, so I always suggest that encryption be something that every user should be doing; since Bitlocker is so easy to implement. People think of it too much in terms of job compliance rather than in terms of their own good. But on another similar note, why doesn't every edition of Windows 10 have Bitlocker built in? Why only for the pro users? From a service desk rep's prospective, would save tons of calls.
-----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Ryan Shugart via Blind-sysadmins Sent: Friday, May 26, 2017 1:41 AM To: Blind sysadmins list <blind-sysadmins@lists.hodgsonfamily.org> Cc: Ryan Shugart <ryshugar@microsoft.com> Subject: Re: [Blind-sysadmins] Setting up Bit Locker on Windows 10
Hi: If you don't have a TPM on your machine, your two options are a boottime pin (which I do not believe is accessible with Narrator) or a USB dongle with the key stored on it. I think this can be any USB stick but am not sure how this works. However, the short answer is if you want to use Bitlocker, having a TPM is highly desired, and these days I'd imagine most if not all hardware beyond the cheapest of consumer models has a TPM. Ryan
-----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Timothy Spaulding Sent: Thursday, May 25, 2017 4:43 PM To: Blind sysadmins list <blind-sysadmins@lists.hodgsonfamily.org> Subject: Re: [Blind-sysadmins] Setting up Bit Locker on Windows 10
Honestly, I don't totally know how it works. I'm not even sure if you can even enable BitLocker without TPM .
-----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Jason White via Blind-sysadmins Sent: Thursday, May 25, 2017 7:08 PM To: blind-sysadmins@lists.hodgsonfamily.org Cc: Jason White <jason@jasonjgw.net> Subject: Re: [Blind-sysadmins] Setting up Bit Locker on Windows 10
Timothy Spaulding <spaulding@icanbrew.com> wrote:
It should come back up to the Windows Logon screen.
This is assuming that you didn't enable the option to enter a pin a boot time to access the hard drive.
Just to satisfy my curiosity, does it need a Trusted Platform Module to store the encryption key if the user opts not to supply a pin at boot time? Not all machines are equipped with TPM hardware, though obviously it's worth including among the list of desirable features in making a hardware purchase.
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists .hodgsonfamily.org%2Flistinfo%2Fblind-sysadmins&data=02%7C01%7Cryshuga r%40microsoft.com%7C8a0270fe5e6c4643679808d4a3c7e637%7C72f988bf86f141a f91ab2d7cd011db47%7C1%7C0%7C636313526344833209&sdata=pA7MbpYWeHM0QmDiD %2FAsEzWdlRmeZMljZaTZkMiGIhk%3D&reserved=0
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists .hodgsonfamily.org%2Flistinfo%2Fblind-sysadmins&data=02%7C01%7Cryshuga r%40microsoft.com%7C8a0270fe5e6c4643679808d4a3c7e637%7C72f988bf86f141a f91ab2d7cd011db47%7C1%7C0%7C636313526344843216&sdata=BN5ekiWYS3CjqNInr VLAfphlxU0onqY2DhMI9x%2F6HzE%3D&reserved=0
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins