Encrypting Additional Drives with BitLocker

Posted Tuesday, 25 September 2007 by Michael Khanin
Digg!

As you may know, BitLocker Drive Encryption only encrypts the C:\ drive.  If you have additional drives in your PC, or use an external USB hard drive with your notebook, you can't encrypt that drive with BDE.  Officially that is :)

While Vista SP1 will bring support for encrypting the other volumes in your system you can do it today using the command line tool manage-bde.wsf.  Now before we get started I must inform you that this is in now way supported by Microsoft.  I've tried it, it worked for me, but I highly recommend taking a backup of the data before proceeding!

With that out of the way launch the Command Prompt as Administrator and run the following command to encrypt additional drives:

cscript manage-bde.wsf -on X: -recoverykey Y:\ -recoverypassword

In this example X: is the drive you wish to recover and Y: is the drive the recovery key will be saved to.  Remember to backup the recovery key and store it in a secure location.  You can store this key on the C: drive (which is encrypted) and it will make things easier when you need to unlock the drive.

Once that is complete you will need to run a command to "unlock" the drive in order to access the data.  With the drive plugged in run the following command:

cscript manage-bde.wsf -unlock X: -recoverykey C:\WO97N74A-A99A-9923-C798-45FF0139DDE9.BEK

If you lose the key you can unlock the drive with the recovery password with the following command:

cscript manage-bde.wsf -unlock X: -recoverypassword 846295-102210-220394-001294-333982-001923-094856-223451

Too make it easier I suggest creating a batch file and dropping it in the startup folder.

Source: TheLazyAdmin.com 





Reddit!Del.icio.us!Google!Facebook!Slashdot!Netscape!Technorati!StumbleUpon!Newsvine!Furl!Yahoo!Ma.gnolia!Free social bookmarking plugins and extensions for Joomla! websites! title=
 

Add comment

You have no rights to add a new comment. May be you need to register on the site.