Assuming a BIOS that supports SED (Self Encrypting Drive) hard drives, and given that Windows 8 will use hardware encryption like SED if the disk has it, does BitLocker still require a TPM to avoid using USB? This regards a standalone laptop not part of a domain.
1 Answer
You can setup bitlocker (with SED) without TPM. But... if you dont want to use USB and if you dont want to enter preboot password then TPM is required. TPM is required to save keys that require for SED to unlock. SED must be OPAL complied to work with TPM.
-
-
There is no single page about this. I have read lots of sources, most of them from "Trusted Computing Group". TPM and OPAL both have standarts from Trusted Computing Group. One of these link is trustedcomputinggroup.org/resources/… another link flashmemorysummit.com/English/Collaterals/Proceedings/2012/…– WhoCaresSep 18, 2015 at 10:14
-
Maybe preboot passcode is required in both case (with TPM or w/o TPM), I gess with TPM hard drive is bound to motherboard. Maybe you dont have to use preboot passcode with bitlocker.– WhoCaresSep 18, 2015 at 10:26
-
password is not required when booting with the usb key inserted and no tpm Nov 28, 2015 at 15:23