Windows 10: Trying to improve my own security w/ Bitlocker

Almost all the Bitlocker guides online seem to tell you that you either need a TPM (hardware module) or to turn it off.

However only recently did I discover that Intel's PTT is effectively a firmware based TPM that leverages modern CPUs, meaning most computers (4th gen and later) should support this as well as modern Ryzen CPUs.

This means that I should be able to setup Bitlocker using PTT/TPM and gain additional security. Please let me know if my understanding is correct:

1. Is my assumption correct that enabling PTT in BIOS and basically being TPM2.0 compliant in Windows means that I should get better security than before?
2. On my desktop I had previously setup Bitlocker with the TPM option disabled. Does this mean I need to disable Bitlocker, let the drives decrypt and then re-enable (and re-encrypt) it after I enable PTT/TPM?
3. To maximize security, I still plan to mandate a password--not just PIN. I know the TPM limits retries significantly which cuts down on the brute force risk, but why limit yourself to a PIN? I see that I can enable "Enhanced PIN."
4. My understanding is the TPM portion is tied to the CPU now or is it motherboard. If I swap a CPU/motherboard (unlikely, but always be prepared), what happens? Is this what the backup key is for?

submitted by /u/dlerium
[link] [comments]

:)

 

Need to turn off Bitlocker to install Windows 10

Hi,

We suggest doing the following steps again to resolve the issue. To complete the procedure, make sure that you have the following information:

• You must be able to provide administrative credentials.
• The drive must be BitLocker-protected.

To suspend BitLocker Drive Encryption on an operating system drive, please follow the steps below:

• Click Start, click Control Panel, click
  System and Security, and then click BitLocker Drive Encryption.
• Click Suspend Protection for the operating system drive.
• A message is displayed, informing you that your data will not be protected while BitLocker is suspended and asking if you want to suspend BitLocker Drive Encryption.
  
• Click Yes to continue and suspend BitLocker on the drive.

Let us know how it goes.

 

Bitlocker Questions

Okay... just saw that mistake

- - - Updated - - -







I followed the step 1 instructions in that link you posted...


So i should now turn on bitlocker to see if it works? Or do I need to do both step 2 and 3 in that link you posted... before I turn on bitlocker?

- - - Updated - - -

Thanks saw that mistake. I post some more pictures. So what do you want me to do now? Do step 2 and 3 in that link you posted? Or try to turn on bitlocker right now after doing the 1st step? Im not sure if in that link, they want you to do all 3 steps or not? Or is it try step 1... if it works, thats it and then turn on bitlocker?

- - - Updated - - -

I am doing step 3.... I did the first part of step 3 and it showed tons of words which meant i entered it correct. But the last step of step 3... i seem to get error? What am i typing wrong here?

 

i am trying to remove bitlocker windows 10 office 365

Hi,

To better assist you with your concern, I would suggest visiting the following links:

• BitLocker
• How to remove BitLocker

Let us know if you need anything else.

Regards.