Hello

Im running Windows 8.1 pro, and I want to use bitlocker on the OS drives, but I don't want to have to enter a pin/key/password each time the server boots, I just want it to boot and be encrypted, without having to enter a password etc.

On the Removable drives I want to turn bitlocker on, with a key/password etc, so if plugged in you have to enter a password

The PC does not have compatible TPM

I have looked at the settings (Require additional authentication at start up), and the option to enable seems fine, but it requires a password or a startup key on a USB flash drive  so  Im somewhat perplexed how to set this in the way I want.

Anyone know if my requirements are possible?

Rgds

Dee

 

Hey there,

Since you don't have a compatible TPM, you have to use a startup key/pin/password.  If you want to do it with just a boot, you need to upgrade the hardware of your computer, and use a motherboard with a TPM chip. 

• Marked as answer by Deedaz 16 hours 14 minutes ago

Hello there, many thanks for the info....

:-)

Hey there,

Since you don't have a compatible TPM, you have to use a startup key/pin/password.  If you want to do it with just a boot, you need to upgrade the hardware of your computer, and use a motherboard with a TPM chip. 

• Marked as answer by Deedaz Thursday, April 02, 2015 3:06 PM

Let me add: some mainboards allow to be armed with a separate TPM module. Those modules can be as cheap as 10 USD including shipping. What mainboard do you have?

besides: there is another option, tpm free: keep the data on a separate partition d: and bitlock only d:. Whenever the server boots, it could mount d: automatically using a keyfile from a network share of another computer (maybe even on a WAN). If the machine gets stolen, no access the the LAN will be possible so d: stays unmounted and encrypted.

Hey, thanks for the info, after doing some research on tmp, I managed to find a tmp module for my gigabyte board. Cheers