BitLocker has a number of advantages over TrueCrypt, including (1) VSS and TRIM working on all volumes, not just those in the scope of system encryption, i.e. So, imaging is still very much viable when using BitLocker, though I have no idea if UEFI and a TPM have any effect on what I've described. This has no effect on restoring system images, and it's got nothing to do with BitLocker, but I found it notable. For example, the "System Reserved" is C:, and my real system partition is H:, while in the booted system, "System Reserved" has no drive letter, and the system partition is C. The drive letters are kind of wacky in WinRE.
This means doing system images inside a running Windows system to take advantage of compression and pagefile/hibernation file omission, but VSS has been working all right for me, and I'm mostly over my fear of it.Ĥ. IFW in WinRE apparently does not see the system partition as unencrypted, even though I can list its files from the command line.
However, I was unable to use manage-bde in tbwinre to unlock the system drive and image it unencrypted, the idea being to image it unencrypted outside a live Windows system like I had been doing with Image for Linux and TrueCrypt. The manage-bde program is available in the tbwinre environment and can be used to unlock encrypted volumes. So far, this is much like TrueCrypt, except for the stupid auto-unlock issue.ģ. Non-system volumes can be imaged unencrypted and encrypted on the fly when restored, so you won't need to re-encrypt after the restore as you do with system images. I've verified this works with several image and restore operations on a couple of machines, all non-UEFI and lacking a TPM.Ģ. If rebooting doesn't work, power down the machine. Do not despair, because nothing is wrong with the data drives, and the problem can easily be fixed, and auto-unlock restored, by following the simple procedure presented here: While they unlock just fine, attempting to turn auto-unlock back on returns an error. The restored system boots and re-encrypts fine, but auto-unlock is turned off for internal data drives previously configured for that. There is no way to encrypt on the fly while restoring, so the image is restored unencrypted.
System images made while Windows is running are saved unencrypted. BitLocker and Imaging with Terabyte ProductsĪs a former TrueCrypt user, here's what I've found over the last few weeks concerning BitLocker and Image for Windows for a Windows 8.1 圆4 system without a TPM, using a UEFI BIOS configured for the legacy mode.ġ.
0 kommentar(er)
