Bitlocker: hardware or software encryption without a TPM?
I'm about to setup a Samsung 840 EVO SSD as the system drive with Windows 8.1 Pro, attached to an Asus P8Z68-V Pro mobo (which doesn't have a TPM). I'll also attach a Western Digital Black HDD for extra storage (no hardware encryption). I know I can enable Bitlocker without the TPM by editting group policy settings.
1st question: Without the TPM, will it still enable Samsung's hardware encryption, or will it be software encryption only? And is the answer conditional upon using Samsung Magician?
2nd question: Assuming I can enable the hardware encryption on the SSD via Bitlocker, will it then use software encryption when writing to the HDD? Is Bitlocker smart enough for that? :p
ssd encryption bitlocker tpm
asked May 31 '14 at 21:36
BellyItcherBellyItcher
1112
|
show 7 more comments
I'm about to setup a Samsung 840 EVO SSD as the system drive with Windows 8.1 Pro, attached to an Asus P8Z68-V Pro mobo (which doesn't have a TPM). I'll also attach a Western Digital Black HDD for extra storage (no hardware encryption). I know I can enable Bitlocker without the TPM by editting group policy settings.
1st question: Without the TPM, will it still enable Samsung's hardware encryption, or will it be software encryption only? And is the answer conditional upon using Samsung Magician?
2nd question: Assuming I can enable the hardware encryption on the SSD via Bitlocker, will it then use software encryption when writing to the HDD? Is Bitlocker smart enough for that? :p
ssd encryption bitlocker tpm
asked May 31 '14 at 21:36
BellyItcherBellyItcher
1112
Just to let you know: If you're using bitlocker as an alternative to truecrypt, you might as well not use anything. Bitlocker is known to be backdoored.
– Jon
May 31 '14 at 22:12
Why don't you just bitlocker both of the drives? Without a TPM you'll have to use a USB startup key and tweak the gp (as you've said). BitLocker does a great job but you only get read/write in Vista onwards. Not very compatible but does a good job. Using other encryption may have similar OS compatibility limitations. Does the Samsung encryption work on other platforms? If not then why bother?
– Kinnectus
May 31 '14 at 22:17
6
@Chipperyman "Bitlocker is known to be backdoored." Citation? (One that is based on actual fact, not merely speculation.)
– a CVn
May 31 '14 at 22:24
For OP's second question, I would expect Bitlocker to be smart enough to know to treat two separate storage devices as separate unless specifically told otherwise. But I'm not familiar enough with it to assert that as fact, hence not an answer.
– a CVn
May 31 '14 at 22:31
I think, if your hard disks are staying in the machine (and won't be used in other machines regularly), then just Bitlocker them both. Boot using the USB (no TPM) and you can have your slave disk automatically unlock as it's plugged into your "trusted" computer...
– Kinnectus
May 31 '14 at 22:31
|
show 7 more comments
I'm about to setup a Samsung 840 EVO SSD as the system drive with Windows 8.1 Pro, attached to an Asus P8Z68-V Pro mobo (which doesn't have a TPM). I'll also attach a Western Digital Black HDD for extra storage (no hardware encryption). I know I can enable Bitlocker without the TPM by editting group policy settings.
1st question: Without the TPM, will it still enable Samsung's hardware encryption, or will it be software encryption only? And is the answer conditional upon using Samsung Magician?
2nd question: Assuming I can enable the hardware encryption on the SSD via Bitlocker, will it then use software encryption when writing to the HDD? Is Bitlocker smart enough for that? :p
ssd encryption bitlocker tpm
asked May 31 '14 at 21:36
BellyItcherBellyItcher
1112
I'm about to setup a Samsung 840 EVO SSD as the system drive with Windows 8.1 Pro, attached to an Asus P8Z68-V Pro mobo (which doesn't have a TPM). I'll also attach a Western Digital Black HDD for extra storage (no hardware encryption). I know I can enable Bitlocker without the TPM by editting group policy settings.
1st question: Without the TPM, will it still enable Samsung's hardware encryption, or will it be software encryption only? And is the answer conditional upon using Samsung Magician?
2nd question: Assuming I can enable the hardware encryption on the SSD via Bitlocker, will it then use software encryption when writing to the HDD? Is Bitlocker smart enough for that? :p
ssd encryption bitlocker tpm
ssd encryption bitlocker tpm
asked May 31 '14 at 21:36
BellyItcherBellyItcher
1112
asked May 31 '14 at 21:36
BellyItcherBellyItcher
1112
asked May 31 '14 at 21:36
BellyItcherBellyItcher
1112
asked May 31 '14 at 21:36
BellyItcherBellyItcher
1112
asked May 31 '14 at 21:36
BellyItcherBellyItcher
1112
1112
Just to let you know: If you're using bitlocker as an alternative to truecrypt, you might as well not use anything. Bitlocker is known to be backdoored.
– Jon
May 31 '14 at 22:12
Why don't you just bitlocker both of the drives? Without a TPM you'll have to use a USB startup key and tweak the gp (as you've said). BitLocker does a great job but you only get read/write in Vista onwards. Not very compatible but does a good job. Using other encryption may have similar OS compatibility limitations. Does the Samsung encryption work on other platforms? If not then why bother?
– Kinnectus
May 31 '14 at 22:17
6
@Chipperyman "Bitlocker is known to be backdoored." Citation? (One that is based on actual fact, not merely speculation.)
– a CVn
May 31 '14 at 22:24
For OP's second question, I would expect Bitlocker to be smart enough to know to treat two separate storage devices as separate unless specifically told otherwise. But I'm not familiar enough with it to assert that as fact, hence not an answer.
– a CVn
May 31 '14 at 22:31
I think, if your hard disks are staying in the machine (and won't be used in other machines regularly), then just Bitlocker them both. Boot using the USB (no TPM) and you can have your slave disk automatically unlock as it's plugged into your "trusted" computer...
– Kinnectus
May 31 '14 at 22:31
|
show 7 more comments
Just to let you know: If you're using bitlocker as an alternative to truecrypt, you might as well not use anything. Bitlocker is known to be backdoored.
– Jon
May 31 '14 at 22:12
Why don't you just bitlocker both of the drives? Without a TPM you'll have to use a USB startup key and tweak the gp (as you've said). BitLocker does a great job but you only get read/write in Vista onwards. Not very compatible but does a good job. Using other encryption may have similar OS compatibility limitations. Does the Samsung encryption work on other platforms? If not then why bother?
– Kinnectus
May 31 '14 at 22:17
6
@Chipperyman "Bitlocker is known to be backdoored." Citation? (One that is based on actual fact, not merely speculation.)
– a CVn
May 31 '14 at 22:24
For OP's second question, I would expect Bitlocker to be smart enough to know to treat two separate storage devices as separate unless specifically told otherwise. But I'm not familiar enough with it to assert that as fact, hence not an answer.
– a CVn
May 31 '14 at 22:31
I think, if your hard disks are staying in the machine (and won't be used in other machines regularly), then just Bitlocker them both. Boot using the USB (no TPM) and you can have your slave disk automatically unlock as it's plugged into your "trusted" computer...
– Kinnectus
May 31 '14 at 22:31
Just to let you know: If you're using bitlocker as an alternative to truecrypt, you might as well not use anything. Bitlocker is known to be backdoored.
– Jon
May 31 '14 at 22:12
Just to let you know: If you're using bitlocker as an alternative to truecrypt, you might as well not use anything. Bitlocker is known to be backdoored.
– Jon
May 31 '14 at 22:12
Why don't you just bitlocker both of the drives? Without a TPM you'll have to use a USB startup key and tweak the gp (as you've said). BitLocker does a great job but you only get read/write in Vista onwards. Not very compatible but does a good job. Using other encryption may have similar OS compatibility limitations. Does the Samsung encryption work on other platforms? If not then why bother?
– Kinnectus
May 31 '14 at 22:17
Why don't you just bitlocker both of the drives? Without a TPM you'll have to use a USB startup key and tweak the gp (as you've said). BitLocker does a great job but you only get read/write in Vista onwards. Not very compatible but does a good job. Using other encryption may have similar OS compatibility limitations. Does the Samsung encryption work on other platforms? If not then why bother?
– Kinnectus
May 31 '14 at 22:17
6
6
@Chipperyman "Bitlocker is known to be backdoored." Citation? (One that is based on actual fact, not merely speculation.)
– a CVn
May 31 '14 at 22:24
@Chipperyman "Bitlocker is known to be backdoored." Citation? (One that is based on actual fact, not merely speculation.)
– a CVn
May 31 '14 at 22:24
For OP's second question, I would expect Bitlocker to be smart enough to know to treat two separate storage devices as separate unless specifically told otherwise. But I'm not familiar enough with it to assert that as fact, hence not an answer.
– a CVn
May 31 '14 at 22:31
For OP's second question, I would expect Bitlocker to be smart enough to know to treat two separate storage devices as separate unless specifically told otherwise. But I'm not familiar enough with it to assert that as fact, hence not an answer.
– a CVn
May 31 '14 at 22:31
I think, if your hard disks are staying in the machine (and won't be used in other machines regularly), then just Bitlocker them both. Boot using the USB (no TPM) and you can have your slave disk automatically unlock as it's plugged into your "trusted" computer...
– Kinnectus
May 31 '14 at 22:31
I think, if your hard disks are staying in the machine (and won't be used in other machines regularly), then just Bitlocker them both. Boot using the USB (no TPM) and you can have your slave disk automatically unlock as it's plugged into your "trusted" computer...
– Kinnectus
May 31 '14 at 22:31
|
show 7 more comments
1 Answer
1
active
oldest
votes
Q1: To encrypt your Samsung 840 Evo through built-in hardware encryption you need motherboard which has support for Self Encrypting Drives (SED) and enabled HDD password in BIOS (Admin password for BIOS should be set earlier). There is no need for TPM as HDD password is stored on drive. After procedure you can check Samsung Magician if encryption is enabled.
You can also check this thread for some additional information.
Q2: BitLocker has no relation with hardware encryption so far. It can use TPM to store encryption keys, which are automatically loaded on machine boot, so in that case remember to set power-on password or Windows password.
edited Mar 20 '17 at 10:17
Community♦
1
answered Jun 2 '14 at 19:23
JarekJarek
68126
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f762137%2fbitlocker-hardware-or-software-encryption-without-a-tpm%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Q1: To encrypt your Samsung 840 Evo through built-in hardware encryption you need motherboard which has support for Self Encrypting Drives (SED) and enabled HDD password in BIOS (Admin password for BIOS should be set earlier). There is no need for TPM as HDD password is stored on drive. After procedure you can check Samsung Magician if encryption is enabled.
You can also check this thread for some additional information.
Q2: BitLocker has no relation with hardware encryption so far. It can use TPM to store encryption keys, which are automatically loaded on machine boot, so in that case remember to set power-on password or Windows password.
edited Mar 20 '17 at 10:17
Community♦
1
answered Jun 2 '14 at 19:23
JarekJarek
68126
add a comment |
Q1: To encrypt your Samsung 840 Evo through built-in hardware encryption you need motherboard which has support for Self Encrypting Drives (SED) and enabled HDD password in BIOS (Admin password for BIOS should be set earlier). There is no need for TPM as HDD password is stored on drive. After procedure you can check Samsung Magician if encryption is enabled.
You can also check this thread for some additional information.
Q2: BitLocker has no relation with hardware encryption so far. It can use TPM to store encryption keys, which are automatically loaded on machine boot, so in that case remember to set power-on password or Windows password.
edited Mar 20 '17 at 10:17
Community♦
1
answered Jun 2 '14 at 19:23
JarekJarek
68126
add a comment |
Q1: To encrypt your Samsung 840 Evo through built-in hardware encryption you need motherboard which has support for Self Encrypting Drives (SED) and enabled HDD password in BIOS (Admin password for BIOS should be set earlier). There is no need for TPM as HDD password is stored on drive. After procedure you can check Samsung Magician if encryption is enabled.
You can also check this thread for some additional information.
Q2: BitLocker has no relation with hardware encryption so far. It can use TPM to store encryption keys, which are automatically loaded on machine boot, so in that case remember to set power-on password or Windows password.
edited Mar 20 '17 at 10:17
Community♦
1
answered Jun 2 '14 at 19:23
JarekJarek
68126
Q1: To encrypt your Samsung 840 Evo through built-in hardware encryption you need motherboard which has support for Self Encrypting Drives (SED) and enabled HDD password in BIOS (Admin password for BIOS should be set earlier). There is no need for TPM as HDD password is stored on drive. After procedure you can check Samsung Magician if encryption is enabled.
You can also check this thread for some additional information.
Q2: BitLocker has no relation with hardware encryption so far. It can use TPM to store encryption keys, which are automatically loaded on machine boot, so in that case remember to set power-on password or Windows password.
edited Mar 20 '17 at 10:17
Community♦
1
answered Jun 2 '14 at 19:23
JarekJarek
68126
edited Mar 20 '17 at 10:17
Community♦
1
edited Mar 20 '17 at 10:17
Community♦
1
edited Mar 20 '17 at 10:17
Community♦
1
1
answered Jun 2 '14 at 19:23
JarekJarek
68126
answered Jun 2 '14 at 19:23
JarekJarek
68126
answered Jun 2 '14 at 19:23
JarekJarek
68126
68126
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f762137%2fbitlocker-hardware-or-software-encryption-without-a-tpm%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Just to let you know: If you're using bitlocker as an alternative to truecrypt, you might as well not use anything. Bitlocker is known to be backdoored.
– Jon
May 31 '14 at 22:12
Why don't you just bitlocker both of the drives? Without a TPM you'll have to use a USB startup key and tweak the gp (as you've said). BitLocker does a great job but you only get read/write in Vista onwards. Not very compatible but does a good job. Using other encryption may have similar OS compatibility limitations. Does the Samsung encryption work on other platforms? If not then why bother?
– Kinnectus
May 31 '14 at 22:17
6
@Chipperyman "Bitlocker is known to be backdoored." Citation? (One that is based on actual fact, not merely speculation.)
– a CVn
May 31 '14 at 22:24
For OP's second question, I would expect Bitlocker to be smart enough to know to treat two separate storage devices as separate unless specifically told otherwise. But I'm not familiar enough with it to assert that as fact, hence not an answer.
– a CVn
May 31 '14 at 22:31
I think, if your hard disks are staying in the machine (and won't be used in other machines regularly), then just Bitlocker them both. Boot using the USB (no TPM) and you can have your slave disk automatically unlock as it's plugged into your "trusted" computer...
– Kinnectus
May 31 '14 at 22:31