Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Two form authentication w/bitlocker, no tpm

Posted on 2015-02-19
6
Medium Priority
?
130 Views
Last Modified: 2015-02-19
The laptop has no means to setup a bios password and without the TPM chip I cannot setup a pin. I can still encrypt the drive but I would like to setup some other form of authentication if possible? Or some other form of encryption that hasn't been hacked yet like TrueCrypt
0
Comment
Question by:stlhost
  • 3
  • 3
6 Comments
 
LVL 57

Expert Comment

by:McKnife
ID: 40618945
Hi.

TC hasn't been hacked. It's a discontinued product, that's all. They declare it insecure, because an audit has found minor weaknesses that they are not going to fix any more.
As for Bitlocker: what OS are we talking about? In vista/win7, you can use a startup usb thumb drive. In win8.x, you can also use a password.

And what would "two form" mean here? We cannot have two factor authentication in bitlocker without using a TPM.
0
 
LVL 2

Author Comment

by:stlhost
ID: 40618963
We used to use TC but since it has been declared insecure we have now moved to self encrypting hard drives like Crucial M500 and M550 and just bios passwords. But one of our executives doesn't want to play ball and bought a laptop of her own that does not have the TPM chip so I am looking for an alternative means to  protect the system (besides windows password) This is Windows 7 Ultimate. Bitlocking the hard drive is not enough they want it password protected somehow
0
 
LVL 57

Expert Comment

by:McKnife
ID: 40619001
If you count the win pw is first factor already, why don't you think you can count the bitlocker protector (in your OS that would have to be a USB startup key) as second?
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
LVL 2

Author Comment

by:stlhost
ID: 40619034
When you say USB Startup Key what does this mean? During the bitlocker process it asks to save the recovery key somewhere and USB is an option that I can save it to but there is no start up key that I am aware of. If you click "Require a Startup key at every startup" it doesn't actually create one, it goes just to the next screen that asks you to print/save the recovery key.
0
 
LVL 57

Accepted Solution

by:
McKnife earned 2000 total points
ID: 40619413
"If you click "Require a Startup key at every startup" it doesn't actually create one" - oh yes, it sure does. It writes a file to your usb drive, you simply don't see it because it is hidden when using default explorer view options. See for yourself, unhide system files and there will be a .bek file right in the root of your usb thumb drive.
When you start your encrypted machine, that thumb drive will need to be inserted.
0
 
LVL 2

Author Closing Comment

by:stlhost
ID: 40619755
You are correct. It does, I jumped the gun too fast. Thank you
0

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
When you put your credit card number into a website for an online transaction, surely you know to look for signs of a secure website such as the padlock icon in the web browser or the green address bar.  This is one way to protect yourself from oth…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question