1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.

Looking for advice about encryption...

Discussion in 'Backup and Recovery' started by liberty610, Dec 6, 2017.

  1. liberty610

    liberty610 Registered Members

    Joined:
    Sep 20, 2010
    Messages:
    48
    Location:
    Pa - USA
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    Gigabyte GA-X99-Ultra Gaming
    CPU:
    Intel Core i7-6800K
    Memory:
    G.Skill Ripjaws 4 series 32GB (4 x 8GB)
    Hard Drive:
    Samsung 950 PRO 512GB M.2
    Graphics Card:
    MSI GTX 1080
    Power Supply:
    Corsair Professional 750W 80+ Gold Certified Semi-Modular ATX Power Supply
    Hey all,

    I run a small production studio where I do a lot of video and audio work. One of the popular requests I get from people is converting old home analog videos to digital.

    Call me paranoid, but I have read so many horror stories of malware and random ware attacks and what not, I want to add a little piece out mind here. I don't want to be the guy who leaked or lost some else's personal media.

    I consider myself a power user when it comes to pcs. I run Windows 10 pro on my media machine. I don't really can't to encrypt my OS drive, but I have 5 other internal hard drives, and encrypting them is something of interests.

    Is bit locker the best option? I have used it inn the past, but removed it for some reason. I can't remember why.

    Are there other options? Any draw backs to using encrypted drives?
     
  2. DSTM (Dougie)

    DSTM (Dougie) Super-Moderator Super Moderators

    Joined:
    May 3, 2009
    Messages:
    8,109
    Location:
    SYDNEY AUSTRALIA
    Operating System:
    Windows 7
  3. liberty610

    liberty610 Registered Members

    Joined:
    Sep 20, 2010
    Messages:
    48
    Location:
    Pa - USA
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    Gigabyte GA-X99-Ultra Gaming
    CPU:
    Intel Core i7-6800K
    Memory:
    G.Skill Ripjaws 4 series 32GB (4 x 8GB)
    Hard Drive:
    Samsung 950 PRO 512GB M.2
    Graphics Card:
    MSI GTX 1080
    Power Supply:
    Corsair Professional 750W 80+ Gold Certified Semi-Modular ATX Power Supply
    Thanks Douggie. I actually read that article already. I think that article points to more or less the operating system drive. I don't plan on encrypting the OS drive. I mostly just want to encrypt data drives so just in case the drives land in the wrong hands, they won't be accessible... Unless of course the person is a super tech geek.

    I already practice solid backup procedures. But another concern is, I have random clients coming in and out of my studio, and I would like the ability to lock certain project drives so if I step away from my desk while they are visiting, I won't have to worry about them poking around other project files (which did happen once). Sometimes I need to leave the room, but still leave my computer unlocked so certain apps continue to work while clients like musicians are in. I remember the last time I had bitlocker turned on a data drive, I had a simple notepad file with the bitlocker command typed in it, and I renamed the end of the file you 'cmd' so I could easily execute the re-locking of the drive without rebooting Windows.
     
  4. starbuck

    starbuck Administrator - Malware Removal Specialist Administrator

    Joined:
    Sep 26, 2009
    Messages:
    3,203
    Location:
    Midlands, UK
    Operating System:
    Windows 10
    CPU:
    AMD Athlon II x2 250 Processor 3.00GHz
    Memory:
    8gb DDR3
    Hard Drive:
    500gb SATA
    Graphics Card:
    ASUS GeForce GTX 960 2gb
    Power Supply:
    650w PowerCool X-Viper
    DSTM (Dougie) likes this.
  5. liberty610

    liberty610 Registered Members

    Joined:
    Sep 20, 2010
    Messages:
    48
    Location:
    Pa - USA
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    Gigabyte GA-X99-Ultra Gaming
    CPU:
    Intel Core i7-6800K
    Memory:
    G.Skill Ripjaws 4 series 32GB (4 x 8GB)
    Hard Drive:
    Samsung 950 PRO 512GB M.2
    Graphics Card:
    MSI GTX 1080
    Power Supply:
    Corsair Professional 750W 80+ Gold Certified Semi-Modular ATX Power Supply
    Thanks for the replies guys. I got to digging around after reading these and figure a couple more things out.

    The main thing I wanted to be able to do was re-lock the drives without having to do a full reboot. So discovered this nifty feature a while back and re-applied it.

    If you type "manage-bde -lock X: -ForceDismount" in a notpade file (without quotations and replacing the letter X with whatever drive letter you are targeting) and save it in a notepad file, you can re-name the file from a .txt to a .cmd. Then anytime you want to re-lock the drive, you just right click the file and click "Run as administrator" and the drive is re-locked.

    I noticed a couple times that the drives would not re-lock, hence the "-ForceDismount" tag I added. I think this is why I turned off bitlocker the last time, because they would not always re-lock when I wanted them too, rendering the feature useless to me. I would click 'run as admin' on the file I created, command prompt box would open for a second, then close without locking the drive.

    So I opened command prompt, typed the manage-bde -lock X: line and found added details that said 'Some files are still in use, add -ForceDismount to override'. These are straight data drives, and I wasn't using any of the files as all I was doing was testing the lock and relock option. So I figured I would add the Force Dismount and it locks the drive everytime now. Happy camper here ;)

    I am assuming that Bitlocker doesn't actually prevent the drives from being attacked if my computer is hit with a virus or maleware online, but the added offline security is a solid addition. I'm pretty cautious on where I go online and what I open, so hopefully I am okay to go.

    Thanks for the info guys!
     
    Tony D likes this.
: Encryption

Share This Page