Bitlocker without TPM and USB

Hello Team,
I am working for a company which has Windows Server 2012 R2 domain server and mixture of Windows 7 and Windows 8 client computers.
The problem is, I need to configure bit-locker in all client machine, but some machine doesn't have TPM. I found a way to configure bit-locker without TPM, but it requires USB(key within it) at every startup.
So I want to configure Bit-locker in all client machine without TPM and USB, but with PIN. And all bit-locker recovery keys should be backed up to Active directory.
Please let me know the steps to configure this rather than HTTP links.
Thanks in Advance.
Have a great day ahead and make a great day for me.

Hi.
Having a PIN is only possible in combination with a TPM, but having a password alone is possible since windows 8.

Similar Messages

Questions about using Bitlocker without TPM

We currently use Bitlocker to encrypt our Windows 7 computers with TPM. Now we are looking at encrypting some Windows 7 computers without a TPM. I see how to change the group policy setting to allow Bitlocker without a TPM. I have looked at a lot of other
threads and I have a few questions about how the Bitlocker without TPM works.
1) I see a USB drive containing a key is required for Bitlocker configurations without a TPM, say the end user loses this USB drive, what are the recovery options for their computer?
This article seems to indicate that without the USB drive connected, you are unable to even access recovery options http://blogs.technet.com/b/hugofe/archive/2010/10/29/bitlocker-without-tpm.aspx
We have recovery backed up to AD when Bitlocker is enabled, but how could we do this recovery on a computer on computer where it's USB is lost? Would we have to remove the HD itself and attach it to another computer to access?
2) After enabling Bitlocker on a computer without a TPM and using the USB Drive for the key, is there a way to also add a PIN or password protection at bootup?

Hi,
Sorry for my dilatory reply,
Configuring a startup key is another method to enable a higher level of security with the TPM. The startup key is a key stored on a USB flash drive, and the USB flash drive must be inserted every time the computer starts. The startup key is used to provide
another factor of authentication in conjunction with TPM authentication. To use a USB flash drive as a startup key, the USB flash drive must be formatted by using the NTFS, FAT, or FAT32 file system.
You must have a startup key to use BitLocker on a non-TPM computer.
From: http://technet.microsoft.com/de-de/library/ee449438(v=ws.10).aspx#BKMK_Key
For more Q&A about BitLocker, you can refer to the link above.
hope this is helpful.
Roger Lu
TechNet Community Support

Bitlocker with TPM and PIN testing?

Good day all,
We are about to deploy 10 Surface Pro 3's running Windows 8.1 Enterprise x64. We have enabled the TPM, enabled "Allow Enhanced PINS for Startup", "Pre-boot Keyboard" and turned on Bitlocker through the gui which recommended setting
a PIN which I did.
Everything seems to work as it should, how can I be convinced TPM and PIN are working together? I seem to be able to punch into Bitlocker many bad passwords without warning or asking me to reboot which is does for all other laptops without tpm.
1. How many bad password attempts do I get with TPM by default before lockout?
2. Where is my *.tpm recovery key?
3. Why when the TPM locks out can I still gain entry by typing in the Bitlocker PIN (not recovery password)
4. I want TPM to lockout after 5 incorrect attempts.
To test the TPM working I disabled the TPM in the BIOS and on next reboot Bitlocker asked for the Recovery Password which to me proves Bitlocker private encryption keys are safely held in the TPM. Is this safe to presume TPM is working?
here is the output from manage-bde and get-tpm status
   Size:                 59.11 GB
    BitLocker Version:    2.0
    Conversion Status:    Fully Encrypted
    Percentage Encrypted: 100.0%
    Encryption Method:    AES 128
    Protection Status:    Protection On
    Lock Status:          Unlocked
    Identification Field: Unknown
    Key Protectors:
        TPM And PIN
        Numerical Password
TpmPresent          : True
TpmReady            : True
ManufacturerId      : 1229346816
ManufacturerVersion : 5.0
ManagedAuthLevel    : Full
OwnerAuth           : u2uAKH0Sr+d98s+oGXLLU8DHUuc=
OwnerClearDisabled : True
AutoProvisioning    : Enabled
LockedOut           : False
SelfTest            : {}

Hi Paddy,
"1. How many bad password attempts do I get with TPM by default before lockout?"
It depends on the the TPM chips.
"Some TPM chips may not store failed attempts over time. Other TPM chips may store every failed attempt indefinitely. Therefore, some users may experience increasingly longer delays when they mistype an authorization value that is sent to the TPM"
"4.I want TPM to lockout after 5 incorrect attempts."
We can set the group policy "Standard User Individual Lockout Threshold " in this path (Check the detailed information of this policy):
Computer Configuration\Administrative Templates\System\Trusted Platform Module Services\
Here is a link for reference("About TPM lockout" part and "Use Group Policy to manage TPM lockout settings"part ):
Manage TPM Lockout
https://technet.microsoft.com/en-us/library/dn466535.aspx
"2. Where is my *.tpm recovery key?"
When we set owner of the TPM ,we will be given a chance to save the TPM passowrd .
And when the BitLocker recovery key is saved to a file, BitLocker also saves a TPM owner password file (.tpm) with the TPM owner password hash value.We also can save them to the AD (Check the group policy in the same path as before). Have you tried to save
the recovery keys to a external media ?
Here are links for reference:
Reset the TPM Lockout (Check the first part)
https://technet.microsoft.com/en-us/library/dd851452.aspx?f=255&MSPPError=-2147217396
Windows Trusted Platform Module Management Step-by-Step Guide(Check "Step 2: Set ownership of the TPM" part )
https://technet.microsoft.com/pt-pt/library/cc749022%28WS.10%29.aspx?f=255&MSPPError=-2147217396
"3. Why when the TPM locks out can I still gain entry by typing in the Bitlocker PIN (not recovery password)"
When the TPM is locked out, it is also possible that the user will enter the correct PIN, but the TPM will respond as if the incorrect PIN was entered for a period of time.
Check the "When should I reset the TPM lockout" part .
Reset the TPM Lockout
https://technet.microsoft.com/en-us/library/dd851452.aspx?f=255&MSPPError=-2147217396
" Is this safe to presume TPM is working?"
From the output of the command line ,we can get the information that the TPM is working .It is not recommended to disable the TPM when the data is encrypted with TPM .
Best regards

OfficeJet 7500 E910 wireless printing without network and USB connection

Dear All,
I'd like to know what is the way of taking the prints/scans from the HP OfficeJet 7500 product without using the network or USB cable ?
Regards,

Sorry, you will not be able get prints or scan from the computer without the network or USB cable.
You can copy documents on the glass or through the top feeder without the USB or network.
**Click the KUDOS star on the left to say 'Thanks'**
Please mark a reply "ACCEPTED AS SOLUTION" if it solved your problem, so others can find it.

Airport Extreme - problem with usb printer and usb disk

I have Airport extreme with firmware 7.1. I try connect usb disk and usb printer with usb-hub to airport. I can't get disk or printer working. Also try connect only disk or printer without usb-hub to airport getting same problem. How I get disk and printer working with wireless network (windows pc computers)?
1)
My printer is HP PSC 1210 all-in-one ( http://h10025.www1.hp.com/ewfrf/wc/product?product=90764&lc=fi&cc=fi&dlc=fi&lang =fi&cc=fi&y=0&x=0 )
- printer seems working fine after installing bonjour printer installing wizard.
- I get error (in windows) when I try print document from word. Error only says "error printing" in status value.
- In airport utility all seems ok. Airport see usb printer "Hewlett-Packard psc 1200 series"
- printer protocol is RAW and driver manufacture HP (also try with microsoft driver)
2)
USB disk is Targa Databox II 250
- Airport utility says "Disk needs repair. Errors were found with a disk connected to your airport base station. please connect the usb disk to your mac or pc and use disk utility or another disk application to repair the disk"
- I have connected Targa usb disk to windows pc and run scandisk and defreg. No errors found in windows. Result..no help for airport

I have a similar problem to your second issue. Tried connecting a Netdisk to the USB port of the Airport Extreme and it also said there was a problem with the disk. Have performed a low level format on the disk and Airport Extreme still complained the disk had a problem.
After unplugging the disk, my route decided to stop allowing wireless connections even after rebooting. Ended up having to hard reset the Airport Extreme and reconfigure it with my old settings to work again.
FWIW, the first Airport Extreme I purchased today only worked on 802.11a and steadfastly refused to work on b/g so had to get a replacement. I suspect Apple's quality control is not quite as good as it used to be.

Bitlocker to Go and deleted computer object

When encrypting a USB drive using Bitlocker to Go and storing the recovery information in AD, where does it get stored? Is it in the computer object like regular Bitlocker? If so, if the computer is retired or the AD computer account is deleted,
do you lose the recovery information for that drive?

Hi,
Backed up BitLocker recovery information is stored in a child object of the computer object. That is, the computer object is the container for a BitLocker recovery object. If you delete a computer object from AD, you will also delete the BitLocker recovery
information, which is a child object.
But you can use AD restore mode to retrieve the deleted object.
If you have any feedback on our support, please click
here
Alex Zhao
TechNet Community Support

Bitlocker & ThinkVantage Rescue and Recovery on 64 Windows 7 Enterprise

Hi
I am attempting to setup ThinkVantage Rescue and Recovery 4 on a X300 ThinkPad with 64bit Windows 7 Enetrprise and BitLocker enabled. A installed ThinkVantage Rescue and Recovery 4 after turning on BitLocker, as stated in considerations in ThinkVantage Rescue and Recovery 4 readme file. When I press the blue ThinkVantage button and then F11, it starts ThinkVantage Rescue and Recovery 4, but shortly after splash screen with life-belt appears the notebook restarts and BitLocker requires keyfile to continue. When I give it the key file it boots nomally. However if I restart and attempt to enter ThinkVantage Rescue and Recovery 4 again - the same story repeats, so I'm unable to use ThinkVantage Rescue and Recovery 4. Then I disabled BitLocker encryption on boot drive, and ThinkVantage Rescue and Recovery 4 started to work normally, without touching anythnig else.
So, finally are Bitlocker & ThinkVantage Rescue and Recovery 4 compatible on 64 Windows 7 Enterprise? Any one having success with this combination?
Thanks, George

Its a known bug already reported by many thinkpad users running 64bit versions of Win7,Microsoft might issue a fix.If you want to report it to them
www.connect.microsoft.com
Cheers and regards,
• » νιנαｿѕαяα∂нι ѕαмανє∂αм ™ « •
●๋•کáŕádhí'ک díáŕý ツ
I am a volunteer here. I don't work for Lenovo

Macs and USB Devices Not Getting Along

I am posting this incase I'm not the only one.
I have noticed this issue with my Intel iMac as well as my PPC iMac
Both are running the latest versions of OSX 10.4.9
This is regarding USB connectivity and the effect connected devices have on the system.
USB Setup
1 7 Port usb hub
1 Palm Dock Connected via hub
1 iPod Dock Connected to 2nd USB Port on iMac
1 ScanSnap connected via hub - POWER OFF
Bluetooth Apple Mouse & Keyboard
1 TomTom 910 connected via hub - Connected to dock but power is off.
1 Canon IP90 Connects via Bluetooth - POWER OFF
This is what happens.
If one of the following usb devices is connected, boot times can be extended with the system "pausing" at the Gray screen before Gray Apple Logo appears.
iPod
Palm TX
Once the OS boots Missing Sync's Menu Bar status application will not load, will have to manual load app.
If I disconnect these devices and reboot boot time is normal with no "pause" and missing sync loads normally.
Also i Have noticed my Apple keyboard will take longer to pair during boot with or without these devices connected.
iMac will not power down as scheduled with these usb devices connected if the system falls asleep with them connected.
Normally the iMac will wake itself up at 11pm to shut down. If my iPod or Palm is connected it will not. It will only shut down via schedule if it is awake when scheduled time is reached.
iMac G5 2 Ghz 1.5 Ram 400 Gig HD & iBook G4 1.33 12 Mac OS X (10.4.6)

So just an updated to my original post. I have been working with tech support for Missing Sync. There is a known issue with a menu bar application that comes with their software. It seems when more than 1 or 2 usb devices are connected this menu bar app doesn't load correctly... or at all.
According to them.. one of their techs actually spoke with a Apple Engineer at WWDC this week regarding the issue. According to this Apple Engineer there is a known issue with OS X and USB handling. Apparently the OS can "freak out" if certain devices are connected during boot.
No other specifics where given, and who knows if this is Missing Syncs attempt at shelling off responsibility to Apple. However, I am inclined to believe it as I have noticed that my iMac Intel or PowerPC will take a significantly longer time booting if my iPod or Palm Pilot is docked during boot. I've also noticed I can't reset my PRAM when these devices are connected.
I hope apply addresses these issues, seems kinda crazy its gotten this far being that USB devices are the primary method for expanding your Mac's abilities.
iMac G5 2 Ghz 1.5 Ram 400 Gig HD & iBook G4 1.33 12 Mac OS X (10.4.6)

Mac Mini and USB 2.0 hubs (hubs stop working within a month)

I have an aluminum Mini running OSX 10.6.6 (Snow Leopard). With only 4 USB ports, I have need of a USB hub to accommodate my external drives and other peripherals: keyboard/mouse, camera and iPhone have to use the existing ports in the Mini (difficult access to ports due to space limitations), leaving one port for up to 4 external drives (older drives 40-60gb used for backup and extra storage).
I have problems using powered USB 2.0 hubs with this computer; I have 'burned out' 2 hubs since buying the Mini in February. They just flat out stop working, though they still show power (the power indicator light on the hubs); no peripheral is recognized when plugged into the hub (which worked fine for about a month). I can unplug the 'must use Mini ports' (camera, iPhone, charger, etc) and the peripheral drives are recognized and work normally when plugged directly into the Mini ports.
One hub was a Belkin 4-port hub (about 1 year old) and the other was a GE 3-port hub with several flash card readers (19-in-1 card reader), also about a year old. Is there any reasonable explanation why powered hubs would suddenly stop working, related to use with the Mac Mini 2010 aluminum version?
I had worse problems with the USB ports in an old (~2006) Mac Mini (out of warranty), where the USB ports in the Mini stopped working, which is partly why I bought the new mini. In light of this tidbit, (be honest, please) are there known issues with Mac Minis and USB?

Each of the external drives has its own power supply; I generally only use one drive at any one time, but on rare occasions I have powered up more than one to confirm or transfer files. I don't leave any of those drives on when not in use, and when everything is working I properly eject/unmount them before turning them off.
There have been times when I powered up a drive connected to a powered hub and both the hub and the drive indicated activity but the drive didn't mount. On those occasions the drives sometimes would not appear in Disk Utility, and other times would appear, but would not be "mountable". I didn't know what the best way to deal with that was, so I would just turn the drive off, hoping the lack of mounting on the desktop meant no real drive activity was occurring and I wouldn't risk data loss or drive damage. So far all the drives seem to work fine when plugged directly into the back of the mini.
The main external hard drive I was using when the Belkin hub failed (iomega 40g) is USB 2.0 only (no firewire). I have another drive that is only firewire (la cie 60g)... so it wasn't a factor. Two other external drives are ACOM, one 40g one 120g, and then there's my old iMac G5 disk (display fizzled and everything but the disk recycled through Apple's recycling program) which is mounted in an external enclosure and is part of the USB contingent, but is not being used for anything but backup (all three both USB 2 and FW400 capable). (I know, too many toys... but why throw them out?)
The USB hubs both had their own power supplies, too, and I never used them without power (though I tried it as part of troubleshooting, before reading the Apple article on USB and power requirements). Other USB devices that only work when plugged into the mac directly are my Epson Stylus CX4800 all-in-one, and my Radio Shark.
So, whaddya think? Should I risk buying another powered USB hub or just live with plugging in peripherals to one available USB port (through a short USB 2.0 extension) and only use one at a time? That would be a bit of a pain, but if there are no issues you've heard of with Mac USB ports (several unanswered questions in the Mini Support forums here involving USB and peripherals, I noticed), what else would explain the seemingly short lives of USB hubs?
Oh, here's something I just remembered: the last time the Belkin hub was working (last night), I had my Radtech BT mouse charger cable plugged in (not charging, mouse not attached) along with two of the external hard drives, and my Fuji camera USB cable. I got an error message onscreen (on the Mini) that a drive had been improperly ejected (or put away?), yet the hard drive in question was still mounted on the desktop. I looked at the hub, and the loose ends of the charger and the camera USB cable were touching. Could that have caused the error (and maybe the hub to fail)? (Edit: the camera cable I think was plugged into the mini's one available port; 3 external drives and the mouse charger were plugged into the hub, _but only one drive powered up and in use (3rd edit)_. The camera end of its USB cable contacted the mini-plug end of the mouse charger... could that have short-circuited the hub? +That wouldn't explain the failure of the GE hub a couple weeks before... but I don't know if any of this is connected, so to speak--2nd edit.+)
Message was edited by: blick
Message was edited by: blick
Message was edited by: blick

How can i get my deleted contacts in my iphone 4s without itunes and icloud backup

how can i get my deleted contacts in my iphone 4s without itunes and icloud backup

If you connect your iPhone to a computer running Linux (Ubuntu version in my case) it will become recognized as a normal USB memory pen-drive.
From there, you can use many methods to recover your lost deleted files.
TestDrive allows you to search the drive (iPhone memo) and gives you the possibility to recover deleted files. I'm not an expert, nor did it with iDevice by myself. But it worked for me with Symbian phone (Nokia)...
Alternatively:
Check steps explained in this article.

Mounting NTFS,FAT32 and USB FLASH drive

Problem and problem!!
I am going to fade up with Solaris 10. Please somebody help me!!
Problem is with mounting my FAT32, NTFS partitions and USB flash drive (twinmos).
How can I mount FAT32, NTFS file system and my USB flash drive in Solaris 10??

cN: the N'th disk controller installed in the system
tN: the SCSI TARGET id. Also used for atapi, firewire and usb mass
storage device, but it's always 0. Use to identify a specific disk
device on the disk controller.
dN: the SCSI LUN id. For atapi devices this is 0 for master device,
1 for the slave device. For usb mass storge devices this field could
contain a value > 0 - for example usb flash card readers often
present the slots for the various flash card formats as multiple LUNs. For simple usb flash memory sticks, this should be
LUN 0.
sN: the slice N from the SunOS disk label. On a media without a
disk label, slice 2 can be used to access all of the medias contents. Solaris SPARC supports slices s0 - s7, Solaris x86
slices s0 - s15.
pN: on Solaris x86 only: p0 is the whole disk (similar to slice s2,
when there's no SunOS disk label), p1 - p4 are the four primary
fdisk partitions.
The ":c" suffix assumes the media contains the fat filesystem in
a separate fdisk partition, searches the fdisk partition table for
the first partition containing a fat filesystem, and mounts the
filesystem from that partition. On Solaris x86, instead of using
"p0:c" you could also use one of the p1 - p4 device; but the pN
fdisk slices don't exist on Solaris SPARC.

How to add Airport Express and USB 2?

Hello all,
I have a Titanium 1ghz that currently has no Airport. I'd like to add Airport Express and USB 2. I know I can do both via the PCMCIA slot, but only one at a time.
(Before you say: Just add USB 2 via the slot, and then add a WiFi dongle via the new USB -- I need to use the Airport for Internet Sharing (the PB is going to be a slim little server/Airport hub), and I've never seen anyone (including me) succeed at getting an internet connection shared via a dongle.)
FWIW, the main reason I need the USB 2 is to connect a pair of external hard drives. If I could connect the USB drives via the Firewire ports, I'd be all set. Are there adapters that would let me do this?
Thoughts? They're much appreciated.
SJ

FWIW, the main reason I need the USB 2 is to connect a pair of external hard drives. If I could connect the USB drives via the Firewire ports, I'd be all set. Are there adapters that would let me do this?
No, there aren't. But it would be simple enough to replace your USB-only external drive enclosures with enclosures that have FireWire ports. Just swap the drive mechanisms themselves into the new enclosures. FireWire would give you better speed than USB2, and if your enclosures have two FW ports (say, one FW 400 and one FW 800) and their own power supplies, then you could daisy-chain both drives on the Tibook's single FW port.
Of course if you can get by without having the two drives connected at the *same time* as you're using the wifi connection, then a USB2 PC Card and a wifi PC Card (like this one) will serve you just fine.

Unresponsive USB 3.0 and USB Ports

Hello, Hp, Recently I purchased a brand new USB 3.0 adapter for my front panel of my desktop computer, but also recently I noticed that one of my 2 USB 3.0 ports is faulty as it supplies power but can not operate devices.
A couple days ago I also lost function with one of my back motherboard 2.0 ports, I have been using the exact same usb ports and motherboard for over a year now and only recently have these faults occured. I contacted my retailer who I purchased the USB 3.0 panel from to see if they had any drivers or requirements I needed to install first but they said that it comes default without drivers and should just integrate on connection, they said the product may be faulty, but also they told me to contact my HP support to get the latest BIOS and all chipset driver’s download link.
Which is why I am here, as i could not find them on the HP website so I am asking for someone to give them to me, this is my current motherboard (http://h10025.www1.hp.com/ewfrf/wc/document?cc=us&lc=en&docname=c03748942#N95) If someone could please give me the downloads for it, that would be very helpful and any other information that you think is helpful to the situation as I am looking into buying another motherboard if I cannot fix this.
Thanks, I hope this gets solved and have seen that i'm not the only one on here with this similar fault.

Did you try resetting the ports? Here are the instructions for that from the microsoft website:
To disable and re-enable the USB controllers, follow these steps:
Click Start, and then click Run.
Note If you are running Windows Vista, click Start, and then use the Start Search box.
Type devmgmt.msc, and then click OK. Device Manager opens.
Expand Universal Serial Bus controllers.
Note You might have to scroll down the list to find this item.
Right-click the first USB controller under Universal Serial Bus controllers, and then click Uninstall to remove it.
Repeat step 4 for each USB controller that is listed under Universal Serial Bus controllers.
Restart the computer. After the computer starts, Windows will automatically scan for hardware changes and reinstall all the USB controllers that you uninstalled.
Check the USB device to see whether it is working.
This would be the first thing to do if your usb ports stop working, which can happen pretty commonly if you don't properly eject the device before removing it.
I work on behalf of HP (But this isn't my job)
Mark my post as “Accept as Solution" if you feel my post solved your issue, so that others with the same question can find the answer.
Please give me Kudos if I wrote something that helped you.

Access the local Mac's Time Machine without its external USB HDD?

Hello.
Is it possible to access the local Mac's Time Machine without its external USB HDD? Or is the external backup HDD required? This is assuming Mac OS X 10.8.5. I am not sure if the newer versions can do it.
Thank you in advance.

Eric Root wrote:
Those are local snapshots. The best thing to due is backup Time Machine and then access it.
Local Snapshots on Portable Macs
How do I access these local (one/1)s without the external HDD connected? I do not get the TM icon option in my top menu bar.

NI PXIe-4154 Conflicting Measurements -- Smartphone and USB

I am having some problem to calculate power consumption from android smartphone...
First my setup: Android smartphone is connected to PC with USB. Both smartphone and USB do not provide their own power, but instead, I provide power to them via PXIe-4154. To clarify, smartphone's battery is removed and replaced with probes from ch0, and red power wire on USB cable is cut and end going toward smartphone is connected to probes from ch1 (ground wire is connected as well). Also, ch0 is set to 4.1V and ch1 is set to 5V.
My problem now is to try to find right method to calculate power and energy usage in this setup for smartphone alone (without effect of USB). My initial calculation of power and energy (with USB connected) turned to be wrong when I tried to perform same measurements without USB (ch0 only) (which were different by a good degree). I still hope I can try to calculate corrent power that is used by smartphone alone based on current configuration (and current samples that I have). (I am using USB mostly because of convenience, since it allows me to control android smartphone with ADB commands, over USB).
Here are some of my measurements (with USB and without, which conflict): When I have USB connected, idle current from ch0 is -0.28A and active current is -0.1A (when I run my test task). At the same time, idle current on ch0 is 0.37, and active current is 0.405A. When I tried to perform same measurement without USB (I sent command for the task over wireless connection), my idle current on ch0 is 0.022A and active current is 0.28A. What I can't understand is why I seeing difference in delta current (0.17 + 0.035 vs 0.258).
Also, when I turned off the phone, currnet on ch0 is -0.345A and current on ch1 is 0.382A.
I am not sure if my PXIe board is configured incorrectly, or why would I get such conflicting results. Could anything give me some advise what I could try to do to solve this?

Hi armendhz,
I have a few questions that may help clarify your situation for me.
1) Where are you getting your current readings?
2) How are you measuring a current when the phone is turned off?
3) Do you have any other PXI modules?
4) Can you attach a schematic of your connections for me?
Hopefully we can get to the bottom of this soon.
Best Regards,
Thomas B.
National Instruments
Applications Engineer

Bitlocker without TPM and USB

Similar Messages

Maybe you are looking for