Whenever you encrypt data you run the risk of losing access to important business information. I regularly get frantic emails from desparate administrators whose boss no longer has access to files on his laptop due to a careless implementation of Encrypting File System (EFS). I expect to see the same kind of disasters with BitLocker.
But you don't need to be a statistic. Make sure you implement and test an appropriate recovery method for Bitlocker drive encryption before turning this new technology loose on your organization!
Windows Vista's BitLocker provides recovery key functionality. You just need to create the recovery key and store it where you can find and access it once it's needed. You can store BitLocker recovery keys:
- on "master" USB drive
- in a secure shared folder
- Active Directory
- as a 48-digit Recovery Password
There a number of issues to consider when deciding which one of the options to use:
- Is Active Directory available?
- Is a file server available during BitLocker set up?
- Do you have a 24/7 help desk available to help users who must recover data?
|
