​Configure BitLocker

​BitLocker - a feature that encrypts entire hard drives.

​Encrypting a hard drive - guarantees the hard drive cannot be read without a password or a decryption key

​How do you turn on BitLocker? Right Click the drive or use the Control Panel

Decryption key - needed if the password is lost & should be stored on different device the hard drive being encrypted

​Trusted Platform Module (TPM) - you need a TPM on your motherboard for BitLocker to provide the most protection

No TPM? Set the Group Policy to "Require Additional Authentication at Startup

​Prepare for File Encryption

​Encrypting File System (EFS) - a feature that encrypts files and folders

• prevents other users from seeing the files & folders

• ​similar to Bitlocker, you will get an encryption key that needs to be backed up on a seperate device

​Compress or Encrypt attributes

1. Compress files - saves disk space

2. Encrypt contents - secures data

you can compress or encrypt, you cannot do both

BitLocker encrypts hard drives vs. EFS encrypts files & folders

Device Encryption - used to encrypt files on Windows phone devices