• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 131
  • Last Modified:

Two form authentication w/bitlocker, no tpm

The laptop has no means to setup a bios password and without the TPM chip I cannot setup a pin. I can still encrypt the drive but I would like to setup some other form of authentication if possible? Or some other form of encryption that hasn't been hacked yet like TrueCrypt
0
stlhost
Asked:
stlhost
  • 3
  • 3
1 Solution
 
McKnifeCommented:
Hi.

TC hasn't been hacked. It's a discontinued product, that's all. They declare it insecure, because an audit has found minor weaknesses that they are not going to fix any more.
As for Bitlocker: what OS are we talking about? In vista/win7, you can use a startup usb thumb drive. In win8.x, you can also use a password.

And what would "two form" mean here? We cannot have two factor authentication in bitlocker without using a TPM.
0
 
stlhostAuthor Commented:
We used to use TC but since it has been declared insecure we have now moved to self encrypting hard drives like Crucial M500 and M550 and just bios passwords. But one of our executives doesn't want to play ball and bought a laptop of her own that does not have the TPM chip so I am looking for an alternative means to  protect the system (besides windows password) This is Windows 7 Ultimate. Bitlocking the hard drive is not enough they want it password protected somehow
0
 
McKnifeCommented:
If you count the win pw is first factor already, why don't you think you can count the bitlocker protector (in your OS that would have to be a USB startup key) as second?
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
stlhostAuthor Commented:
When you say USB Startup Key what does this mean? During the bitlocker process it asks to save the recovery key somewhere and USB is an option that I can save it to but there is no start up key that I am aware of. If you click "Require a Startup key at every startup" it doesn't actually create one, it goes just to the next screen that asks you to print/save the recovery key.
0
 
McKnifeCommented:
"If you click "Require a Startup key at every startup" it doesn't actually create one" - oh yes, it sure does. It writes a file to your usb drive, you simply don't see it because it is hidden when using default explorer view options. See for yourself, unhide system files and there will be a .bek file right in the root of your usb thumb drive.
When you start your encrypted machine, that thumb drive will need to be inserted.
0
 
stlhostAuthor Commented:
You are correct. It does, I jumped the gun too fast. Thank you
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now