Re:Creating my awesome Windows 10 dev setup
by Macha on Saturday January 30, 2021 @08:31AM
(#25968894)
My understanding is bitlocker is using your login credentials as the auth to get the TPM to unlock the disk - otherwise how is it blocking anyone else with physical access getting at data by just turning the power on if there's no auth?
[ Parent
| on HN ]
Re:Creating my awesome Windows 10 dev setup
by AaronFriel on Saturday January 30, 2021 @01:43PM
(#25971672)
You can enable TPM and PIN at boot that engages with the TPM, or you can just use TPM in which case your disk is unlocked by the bootloader (IIRC, terminology might be off).
The TPM and PIN has protections against brute forcing and offline attacks. The TPM only method for Bitlocker is more similar to FileVault.