Professional Documents
Culture Documents
Work Smart: Protect Data With Windows 7 Bitlocker
Work Smart: Protect Data With Windows 7 Bitlocker
Get Started
Topics in this guide include: << Insert Joining a Windows 7 System to a Domain Work Smart Guide file
location or URL>>
Prepare to Enable BitLocker
Back Up and Transfer Files Note
Turn On BitLocker You will not be able to encrypt your drive unless you have a network
connection.
Suspend BitLocker Protection
Decrypt Your Drive
Back Up and Transfer Files
Encrypt a Portable Drive with BitLocker To Go <<Organization >> provides several solutions for backing up your data.
Manage BitLocker To Go • <<insert preferred methods here>>
Decrypt a Portable Drive • <<insert preferred methods here>>
1 Click Start , click Control Panel, click System and Security, and
then click BitLocker Drive Encryption.
2 Ensure your computer’s TPM is turned on. To do this, look for a TPM
Administration link in the lower-left corner of the window under
See also.
Important
<<Organization >> recommends using a PIN or startup key because
If you do not see this link, the TPM is not on. For assistance in turning it is the most secure option. You must create a PIN if you are going to
it on, contact << helpdesk contact or technical support URL>>. use DirectAccess as your remote-connectivity software solution.
3 Click Turn On BitLocker. 5 On the Enter a numeric startup PIN page, in the PIN field, type a
number that is between 5 and 20 digits in length. The longer your
PIN number, the more secure your computer will be.
6 In the Confirm PIN field, retype the number.
7 Click Set PIN.
8 On the How do you want to store your recovery key? page, click Notes
one of the following options:
• BitLocker will encrypt your hard-disk drive in approximately one to
• Save the recovery key to a file. Microsoft IT recommends this three hours, depending on its size. You can continue to use your
option, which enables you to save your password to a network computer during the encryption process.
file-share folder, such as My Site.
• After BitLocker is enabled, each time that you attempt to log on to your
• Print the recovery key. computer, you will need to enter your BitLocker PIN before Windows
starts. If you have any issues accessing your computer, contact
<< helpdesk contact or technical support URL>>.
11 Close and save any files that you have open. (In the next step, you 1 Click Start , click Control Panel, click System and Security, and
will restart the computer.) then click BitLocker Drive Encryption.
BitLocker will decrypt your hard-disk drive in approximately 1–3 hours, 6 In the Choose how you want to unlock this drive dialog box, select
depending on the hard-disk size. You can continue to use your computer one of the following options.
during the encryption process.
• If you want to use a password to unlock the drive, select the
Use a password to unlock the drive check box, enter your
Encrypt a Portable Drive with password twice, and then click Next.
BitLocker To Go • If you want to use a smart card to unlock the drive instead,
select the Use my smart card to unlock the drive check box,
When you encrypt a portable drive with BitLocker To Go, you can set it to
insert your smart card, and then click Next.
unlock by using a password or your smart card.
b. In the Save BitLocker Recovery Key as dialog box, BitLocker If you chose password protection:
suggests a filename to use. You can edit this filename to
i. Enter your password.
distinguish it from recovery keys that you may acquire for
additional portable devices. For example, you might want to ii. If you want to have the device automatically unlocked
name it “BitLocker San Disk 2Gig Recovery Key DDxxxDxx….” when you use it with your computer, select the
Automatically unlock on this computer from now on
check box. To use auto-unlock, BitLocker must be
enabled.
• BitLocker To Go can encrypt your drive in minutes or hours, 3 Select one of the options in the dialog box.
depending on your drive’s size, your connection speed, and the
technology you use, such as External Serial Advanced Technology
(eSATA), FireWire, USB, or USB 2.0. You can continue to use your
computer during the encryption process.
• Each time you attempt to use the drive, you will need to enter the
password or smart card unless you set up BitLocker To Go to unlock
the drive automatically. If you have any issues accessing your drive,
contact the << helpdesk contact or technical support URL>>.
• If you want to change the password for a portable drive or change
the auto-unlock feature, click Start, click Control Panel, click System
and Security, and then click BitLocker Drive Encryption. In the
BitLocker Drive Encryption dialog box, click Manage BitLocker
next to the portable drive information.
• All recovery keys are stored in Active Directory® and can be obtained
<< selfhelp URL, helpdesk contact, technical support URL>>.
Decrypt a Portable Drive
Manage BitLocker To Go 1 Click Start , click Control Panel, click System and Security, and
then click BitLocker Drive Encryption.
After you encrypt a portable drive, you may want to change a password,
remove a password, add a smart card to unlock the drive, save or print a 2 Click Turn Off BitLocker.
recovery key again, or turn the automatic unlock feature on or off. 3 Click Decrypt Drive.
To make any of these changes:
1 Click Start , click Control Panel, click System and Security, and
then click BitLocker Drive Encryption.