Approximately 3 weeks ago I wiped my drive and rebuilt my laptop with a single partition encrypted with BitLocker. After 3 weeks and zero problems, you can color me impressed.

Our local AD Domain does not have the extensions necessary to store the recovery information, but BitLocker gives you 3 other options. USB mass storage device, file-share, or even a printer. I chose to store the recovery information on both a USB drive and a file-share. (Moving the files to TrueCrypt volumes once they were tested.)

I am using a Dell LATITUDE D620 and it has TPM 1.2. While TPM takes care of storing the keys, all the encryption is done in software. On my 1.6GHz dual-core machine I don’t even notice the encryption even during large file copies.

It would be nice if BitLocker supported multiple volumes as I really prefer to keep my data on a separate volume. I could use BitLocker on my system volume and EFS on my data volume, but that is much more cumbersome than using BitLocker alone.

[tags]microsoft, vista, bitlocker, tpm, encryption, security, mobility, laptop[/tags]