BitLocker Drive Encryption

Updated: February 25, 2009

Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista

BitLocker Drive Encryption allows you to encrypt all data stored on the Windows operating system volume and configured data volumes, and by using a Trusted Platform Module (TPM), it can also help ensure the integrity of early startup components.

Product Evaluation

BitLocker Drive Encryption

An overview of BitLocker in Windows Server 2008 highlighting the major features of BitLocker such as full-volume encryption, verification of the integrity of early startup components, a robust recovery mechanism, and support for a secure decommissioning process.
Changes in BitLocker Drive Encryption

Describes the changes in functionality for BitLocker in Windows 7 from BitLocker in Windows Vista.
Windows 7 BitLocker Executive Overview

Provides a general overview of BitLocker technology.
BitLocker Active Directory Recovery Password Viewer Overview

Describes how the Active Directory Recovery Password Viewer is used to view BitLocker recovery passwords that have been stored in Active Directory Domain Services.
BitLocker Drive Encryption in Windows 7: Frequently Asked Questions

Provides answers to commonly asked questions from customers who are working with BitLocker in their organizations.

Getting Started

BitLocker Drive Encryption Step-by-Step Guide

Provides step-by-step procedures for using BitLocker in Windows Server 2008 in a test environment.
BitLocker Drive Encryption Step-by-Step Guide for Windows 7

Provides procedures for deploying common scenarios in a lab environment so that you can test the processes before implementing a full deployment.

Design and Deployment

Windows BitLocker Drive Encryption Design and Deployment Guides

Consists of two guides that describe the various aspects of planning for and deploying BitLocker for Windows Vista in an enterprise environment.
BitLocker Drive Encryption Configuration Guide: Backing Up BitLocker and TPM Recovery Information to Active Directory

Provides guidance and tools required to back up recovery information to Active Directory Domain Services (AD DS).
BitLocker Drive Encryption Design Guide for Windows 7

Describes the questions you should consider before deploying BitLocker in your organization and a fictional case study to put those questions into context.
BitLocker Drive Encryption Deployment Guide for Windows 7

Describes how to deploy the various BitLocker features within your organization. Includes information about data recovery agents, smart cards, recovery settings, Group Policy settings, and BitLocker command-line tools.
BitLocker Deployment Sample Resources (http://go.microsoft.com/fwlink/?LinkId=168441)

Provides sample scripts for use in a BitLocker deployment.

Operations

BitLocker Drive Encryption Operations Guide: Recovering Encrypted Volumes with AD DS

Shows how organizations can use BitLocker recovery information saved in AD DS to access BitLocker-protected data.

Technical Reference

BitLocker Drive Encryption Overview

Describes BitLocker, its implementation details, and the typical life cycle of BitLocker on an enterprise computer.

Troubleshooting

BitLocker Drive Encryption Events and Errors

Information to help you diagnose and resolve BitLocker issues.

Additional Resources

BitLocker Drive Encryption Glossary

A list of terms and acronyms related to BitLocker.
Trusted Computing Group

The Trusted Computing Group (TCG) defines the specification for the TPM, a security component used by BitLocker.
Bitlocker Drive Encryption: Value-Add Extensibility Options

This white paper discusses how original equipment manufacturers (OEMs) and independent hardware vendors (IHVs) can develop preboot authentication extensions for BitLocker in Windows Vista.