Before you try to use BitLocker, fire up Windows Update and click the View
Update History link to see whether you have the ???BitLocker and EFS
enhancements??? update from 1/31/2007 or 2/28/2007 (or both). If not, click
the Check for updates link, and in the Windows Ultimate Extras section,
place a checkmark next to any BitLocker updates that appear.
Next, open the BitLocker Drive Encryption page in Control Panel. If you see
an error explaining that a ???TPM was not found,??? see whether there??™s a BIOS
update available for your PC, as described in Appendix A, that supports TPM.
TPM, or Trusted Platform Module, is a chip on your motherboard that??™s used to
store the BitLocker encryption key, allowing you to boot off an encrypted drive.
If your BIOS doesn??™t support TPM, you can use an ordinary removable USB
flash drive for this purpose. Open the Group Policy Object Editor (click Start
and type gpedit.msc), and then expand the branches to Computer
Configuration\Administrative Templates\Windows Components\BitLocker
Drive Encryption. On the right, double-click the Control Panel Setup: Enable
advanced startup options entry, click Enabled, turn on the Allow BitLocker
without a compatible TPM option, and then click OK.
In order for you to use BitLocker, your hard disk must have at least two partitions
(see Chapter 5): one for your operating system, and another ???active???
partition??”of at least 1.5 Gb in size??”used to boot your PC.
Pages:
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658