Solved

Two form authentication w/bitlocker, no tpm

Posted on 2015-02-19
6
121 Views
Last Modified: 2015-02-19
The laptop has no means to setup a bios password and without the TPM chip I cannot setup a pin. I can still encrypt the drive but I would like to setup some other form of authentication if possible? Or some other form of encryption that hasn't been hacked yet like TrueCrypt
0
Comment
Question by:stlhost
  • 3
  • 3
6 Comments
 
LVL 54

Expert Comment

by:McKnife
ID: 40618945
Hi.

TC hasn't been hacked. It's a discontinued product, that's all. They declare it insecure, because an audit has found minor weaknesses that they are not going to fix any more.
As for Bitlocker: what OS are we talking about? In vista/win7, you can use a startup usb thumb drive. In win8.x, you can also use a password.

And what would "two form" mean here? We cannot have two factor authentication in bitlocker without using a TPM.
0
 
LVL 2

Author Comment

by:stlhost
ID: 40618963
We used to use TC but since it has been declared insecure we have now moved to self encrypting hard drives like Crucial M500 and M550 and just bios passwords. But one of our executives doesn't want to play ball and bought a laptop of her own that does not have the TPM chip so I am looking for an alternative means to  protect the system (besides windows password) This is Windows 7 Ultimate. Bitlocking the hard drive is not enough they want it password protected somehow
0
 
LVL 54

Expert Comment

by:McKnife
ID: 40619001
If you count the win pw is first factor already, why don't you think you can count the bitlocker protector (in your OS that would have to be a USB startup key) as second?
0
Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
LVL 2

Author Comment

by:stlhost
ID: 40619034
When you say USB Startup Key what does this mean? During the bitlocker process it asks to save the recovery key somewhere and USB is an option that I can save it to but there is no start up key that I am aware of. If you click "Require a Startup key at every startup" it doesn't actually create one, it goes just to the next screen that asks you to print/save the recovery key.
0
 
LVL 54

Accepted Solution

by:
McKnife earned 500 total points
ID: 40619413
"If you click "Require a Startup key at every startup" it doesn't actually create one" - oh yes, it sure does. It writes a file to your usb drive, you simply don't see it because it is hidden when using default explorer view options. See for yourself, unhide system files and there will be a .bek file right in the root of your usb thumb drive.
When you start your encrypted machine, that thumb drive will need to be inserted.
0
 
LVL 2

Author Closing Comment

by:stlhost
ID: 40619755
You are correct. It does, I jumped the gun too fast. Thank you
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
There are many Password Managers (PM) out there to choose from. PM's can help with your password habits and routines, but they should not be a crutch you rely on too heavily. I also have an article for company/enterprise PM's.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question