Automating Active Directory® Administration with Windows PowerShell® 2.0

Manage BitLocker

BitLocker was introduced in Windows Vista and Windows Server 2008 and provides Full Volume Encryption (FVE) for Windows client and server computers. For Windows Server, BitLocker is an optional feature that must be installed prior to use. The default behavior of BitLocker is for use with a Trusted Platform Module (TPM). Using BitLocker in conjunction with a TPM provides a secure root of trust (that is, a secure boot) for the FVE solution. Although using a TPM is the default behavior, BitLocker may also be configured on systems without a TPM by using an alternative protection method such as storing a key on the USB drive. In BitLocker terminology, the usage method of BitLocker may be referred to by the key protector that is being ...