3 ms·
> Yeah for unlocking it within a host OS as a data disk, not for booting from it... this is not true. you can configure bitlocker with or without TPMs. just g
by kryogen1c 6y ago
> Yeah for unlocking it within a host OS as a data disk, not for booting from it...
this is not true. you can configure bitlocker with or without TPMs.
just google it. also the doc for the powershell command talks about it in the establishing a key protector section
https://docs.microsoft.com/en-us/powershell/module/bitlocker/enable-bitlocker?view=win10-ps https://docs.microsoft.com/en-us/powershell/module/bitlocker...
- reasonabl_human 6y agoOh wow, thank you! Should’ve known to head straight to the docs instead of searching phrases online. Now to spend the next day backing everything up and configuring passphrase on boot...
- codys 6y agoYa, I ran for a long time with a passphrase in a system without a TPM. I recently got a TPM for it so I could have it restart without me being present. I used the `manage-bde` command rather than powershell: https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker https://docs.microsoft.com/en-us/windows/security/informatio... The GUI for bitlocker doesn't provide access to all the functionality that manage-bde provides (iirc: if a TPM is present, the passphrase options aren't presented in the GUI. And it used to talk about a "PIN" instead of a passphrase/password, but the "PIN" can (with some gpo tweaking) contain letters/space/punct as well as numbers.