Computer Repair, Portland, OR - Is your personal data safe?

Do you use a notebook PC as your primary computer?  If so, this likely means that you have all of your important information stored on the hard drive of that PC.  Of course you are making backups in case of hardware failure, but are you prepared if you lose your notebook or have it stolen?  I’m not referring to restoring your data back to a new drive; I’m talking about having your personal data accessed by the person now in possession of your computer.  With identity theft rampant these days, it probably wouldn’t take long for your sensitive data to wind up being sold for some nefarious purpose.   There are numerous methods that can slow someone down if they have your computer, such as bios passwords, password protecting certain files, etc, but there is only one sure fire way to make certain that your data can’t be accessed: encrypting your entire drive.  Fortunately, Microsoft has a terrific solution that is very easy to use called Bit Locker.  The crucial choice when you buy a new PC, is to specify the version of Windows 7 that has this feature.  Windows 7 Ultimate edition is the only one with Bit Locker.  You also want to make sure the hardware that you are purchasing also has a TPM (Trusted Platform Module) chip on the motherboard.  This is where the encryption keys are stored.  After enabling TPM in the bios of your PC, you simply right click on the C: drive and choose “Turn on Bitlocker”.  The encryption process will take some time.  When it completes, your entire drive will be encrypted and will only be accessible by your PC with the TPM chip that contains your keys.  This means that if your notebook PC is lost or stolen, the drive can’t be removed and read from another PC.  To prevent the drive from being accessed by booting up your PC, you will also want to enable a PIN code.  This will prevent the computer from booting without that PIN being entered.  At this point, your drive is completely protected in the event of loss or theft.  Without that PIN code, your computer WILL NOT boot up.  *You can also encrypt any drive attached to your PC as well with Bitlocker, like external USB hard drives or USB thumb drives!

Here is a great step by step guide from Microsoft:

http://technet.microsoft.com/en-us/library/cc766295(WS.10).aspx

To enable a Bitlocker pin code, you will need to make a change to a Group Policy (computer boot configuration) setting and assign yourself a PIN code:

To enable TPM & PIN at boot:

Click on the Windows button and type gpedit.msc

Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Bitlocker Drive Encryption > Operating System Drives

and open the key:

"Require additional authentication at startup"

Then enable that Key and set"Configure TPM startup Pin: < to "Require startup PIN with TPM"

To set the actual PIN:

Click on the Windows button and type CMD <return> At the prompt, type: manage-bde -protectors -add c: -TPMAndPIN