BitLocker. The Windows Encryption Technology.

BitLocker makes use of the Reliable Platform Module technology which allows for greater security in case of an external attack. It is used to validate the booting of the server. In addition, it guarantees that the hard disk is in optimal security and operation conditions. BitLocker uses 5 operational modes in its operation:

• TPM + PIN + Password: The system encrypts the information with TPM. Additionally, the administrator must enter his or her PIN and password to gain access.
• TPM+Password: The system encrypts the information with TPM and the administrator must provide a password.
• TPM + PIN: The system encrypts the information with TPM and the administrator must provide his access ID.
• Password: The administrator must provide the password to access management.
• TPM: No action is required from the administrator.

How to Install BitLocker on Windows Server 2019/2016

The first thing you have to do is open the Server Manager. Once there, click on add roles and features.

Then select Role-based and features-based installation:

As usual in this type of installation, select the server.

Please skip the window referring to Roles. Then, in the Features window, scroll down to get BitLocker Drive Encryption

When you click on the corresponding box, a window with the necessary features for the installation will be displayed.

Back to the previous window, press next to continue the installation.

Below you will see a summary of the installation. Please press Install.

After a few moments, the installation will be completed. Please note that you must reboot the server to complete the process.

Finally, in this simple way we have seen how to enable BitLocker in Windows Server 2019/2016. In addition, it is our intention to increase the security of your server. All right, that’s it for today. I can’t say goodbye without inviting you to see our post about importing and exporting the security policy in Windows Server 2019/2016. Goodbye

The post How to enable BitLocker in Windows Server 2019/2016 appeared first on Linux Windows and android Tutorials.

Some features of BitLocker.

BitLocker has an option that allows blocking the system startup process. Consequently, the system will load only when the user enters a pin or a device with the password. Here are some of its most important features:

• BitLocker supports 128- and 256-bit XTS-AES keys
• Encrypt and recover devices with Azure Active Directory
• A new Group Policy designed to configure Windows pre-boot recovery has been added
• It is possible to enable the Credential Guard function without UEFI blocking
• Improved Credentials Manager Support
• XTS-AES encryption algorithm This is special against those of direct attacks to the encryption. These attacks are based on manipulating encrypted text to edit system changes

Process for encrypting the external storage drive.

In the first place, right-click on the USB drive and select Turn on BitLocker.

Forthwith, it will start the configuration wizard. It will ask for the type of unlocking: Password and smart card. In this case, we will use a password. With this intention, add the password along with its validation.

Next, you can choose where to backup the recovery key. The options are: Save to Microsoft account, save to file and print the recovery key. For this purpose, save the key to a file.

It then stores the key in a secure directory.

Subsequently, two encryption options are offered. New encryption with improved security but not compatible with older versions of Windows. And compatible encryption. Depending on the use that will be given to the USB device then make the selection.

After the previous preparations have been made, the wizard will start the encryption of the device.

After completing the encryption process, click on Close to exit the wizard.

Then open the file browser and on the removable drive, you will see a lock icon indicating that the drive is encrypted.

Reverse the encryption process

After encrypting the unit, it is necessary to enter the password to gain access. If at any point you no longer need BitLocker, you can disable it. With this in mind, right-click on the drive and select Manage BitLocker

In the next window, click on Turn Off BitLocker

A warning message will be displayed. Please confirm the Turn off BitLocker to begin the process.

Immediately the assistant will start the process. When finished, press Close to exit.

Now when you enter the file browser, the removable drive is displayed without a lock icon. Consequently, it can be accessed without any problem

Finally, we’ve seen how to encrypt USB drives in Windows 10. With this simple method, you can add a password and encrypt the USB drive using BitLocker. This increases the security of our USB devices and protects the most sensitive information. Well, this is it! Before I say goodbye, I invite you to review our post about scheduling the automatic shutdown in Windows 10

The post How to encrypt USB drives in Windows 10 appeared first on Linux Windows and android Tutorials.