BitLocker Drive Encryption

Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista

BitLocker Drive Encryption allows you to encrypt all data stored on the Windows operating system volume and configured data volumes, and by using a Trusted Platform Module (TPM), it can also help ensure the integrity of early startup components. BitLocker was first introduced with Windows Vista and Windows Server 2008 and subsequently updated with the release of Windows 7 and Windows Server 2008 R2.

For answers to commonly asked questions about BitLocker in Windows 7, see BitLocker Drive Encryption in Windows 7: Frequently Asked Questions. If you are troubleshooting error or event messages related to BitLocker, see BitLocker Drive Encryption Events and Errors to help you diagnose and resolve BitLocker issues.

The following table identifies the core documentation available for each version.

Core Documentation

Documentation type	Windows 7 and Windows Server 2008 R2	Windows Vista and Windows Server 2008
Product Evaluation	Changes in BitLocker Drive Encryption Describes the changes in functionality for BitLocker in Windows 7 from BitLocker in Windows Vista. Windows 7 BitLocker Executive Overview Provides a general overview of BitLocker technology in Windows 7.	BitLocker Drive Encryption in Windows Vista An overview of BitLocker in Windows Vista and Windows Server 2008 highlighting the major features of BitLocker such as full-volume encryption, verification of the integrity of early startup components, a robust recovery mechanism, and support for a secure decommissioning process. BitLocker Drive Encryption Technical Overview Describes BitLocker, its implementation details, and the typical life cycle of BitLocker on an enterprise computer.
Getting Started	BitLocker Drive Encryption Step-by-Step Guide for Windows 7 Provides procedures for deploying common scenarios in a lab environment so that you can test the processes before implementing a full deployment.	BitLocker Drive Encryption Step-by-Step Guide Provides step-by-step procedures for using BitLocker with Windows Vista in a test environment.
Design and Deployment	BitLocker Drive Encryption Design Guide for Windows 7 Describes the questions you should consider before deploying BitLocker in your organization and a fictional case study to put those questions into context. BitLocker Drive Encryption Deployment Guide for Windows 7 Describes how to deploy the various BitLocker features within your organization and how to configure Active Directory Domain Services (AD DS) backup of recovery information. Includes detailed information about data recovery agents, smart cards, recovery settings, Group Policy settings, and BitLocker command-line tools. BitLocker Deployment Sample Resources Provides sample scripts for use in a BitLocker deployment.	Windows BitLocker Drive Encryption Design and Deployment Guides for Windows Vista A downloadable set of two guides that describe the various aspects of planning for and deploying BitLocker for Windows Vista in an enterprise environment. BitLocker Drive Encryption Configuration Guide: Backing Up BitLocker and TPM Recovery Information to Active Directory Provides guidance and tools required to back up recovery information to Active Directory Domain Services (AD DS).

Videos and Webcasts

• How Do I? BitLocker and BitLocker To Go

• Windows 7 Screencast: BitLocker To Go

• How BitLocker Prevents Offline Attacks on Windows

Additional Resources

• BitLocker Drive Encryption Operations Guide: Recovering Encrypted Volumes with AD DS

  Shows how organizations can use BitLocker recovery information saved in AD DS to access BitLocker-protected data.

• BitLocker Drive Encryption Glossary

  A list of terms and acronyms related to BitLocker.

• Trusted Computing Group

  The Trusted Computing Group (TCG) defines the specification for the TPM, a security component used by BitLocker.

• Bitlocker Drive Encryption: Value-Add Extensibility Options

  This white paper discusses how original equipment manufacturers (OEMs) and independent hardware vendors (IHVs) can develop preboot authentication extensions for BitLocker in Windows Vista.