Guest groffg Posted April 10, 2009 Posted April 10, 2009 Anyone had any experience bypassing BitLocker (basic mode) using the recovery console (i.e., booting to the Windows DVD or rescue CD)? Based on the documentation, seems like it would work (provided BIOS is configured to boot to CD/DVD drive before the HDD). Having said that, would M$ allow such an obvious attack vector? I don't have a machine w/ a TPM right now, so I can't test this myself. Anyone tried this out? -- groffg Posted via http://www.vistaheads.com Quote
Guest Richard G. Harper Posted April 11, 2009 Posted April 11, 2009 You can boot with a CD/DVD/bootable device - but since the contents of the hard drive are encrypted (all but a small startup stub) it doesn't do you any good anyway. "groffg" <groffg.3qg204@no-mx.forums.vistaheads.com> wrote in message news:groffg.3qg204@no-mx.forums.vistaheads.com...<span style="color:blue"> > > Anyone had any experience bypassing BitLocker (basic mode) using the > recovery console (i.e., booting to the Windows DVD or rescue CD)? Based > on the documentation, seems like it would work (provided BIOS is > configured to boot to CD/DVD drive before the HDD). > > Having said that, would M$ allow such an obvious attack vector? I don't > have a machine w/ a TPM right now, so I can't test this myself. Anyone > tried this out?</span> Quote
Guest groffg Posted April 15, 2009 Posted April 15, 2009 But I thought the Windows recovery CD/DVD was "bitlocker compatible," meaning that if you boot to the CD/DVD, and bitlocker is detected, then it would allow you to authenticate first (which would happen transparently in the event you were using basic mode/TPM). Richard G. Harper;1221716 Wrote: <span style="color:blue"> > You can boot with a CD/DVD/bootable device - but since the contents of > the > hard drive are encrypted (all but a small startup stub) it doesn't do > you > any good anyway. > > "groffg" <groffg.3qg204@no-mx.forums.vistaheads.com> wrote in message > news:groffg.3qg204@no-mx.forums.vistaheads.com...<span style="color:green"> > > > > Anyone had any experience bypassing BitLocker (basic mode) using the > > recovery console (i.e., booting to the Windows DVD or rescue CD)?</span> > Based<span style="color:green"> > > on the documentation, seems like it would work (provided BIOS is > > configured to boot to CD/DVD drive before the HDD). > > > > Having said that, would M$ allow such an obvious attack vector? I</span> > don't<span style="color:green"> > > have a machine w/ a TPM right now, so I can't test this myself.</span> > Anyone<span style="color:green"> > > tried this out?</span></span> -- groffg Posted via http://www.vistaheads.com Quote
Guest Robert Kochem Posted April 17, 2009 Posted April 17, 2009 groffg wrote: <span style="color:blue"> > But I thought the Windows recovery CD/DVD was "bitlocker compatible," > meaning that if you boot to the CD/DVD, and bitlocker is detected, then > it would allow you to authenticate first (which would happen > transparently in the event you were using basic mode/TPM).</span> No, that doesn't work as you expect it. If not boot from your HDD the boot code is different and therefore the TPM is blocked. Bitlocker volumes can be access from the Vista installation environment AFAIR only by entering the Bitlocker recovery key (the "numerical monster") or by providing a saved key on an usb drive. Robert Quote
Guest groffg Posted April 17, 2009 Posted April 17, 2009 Ahh, makes sense. Thank you Robert. Robert Kochem;1227468 Wrote: <span style="color:blue"> > groffg wrote: > <span style="color:green"> > > But I thought the Windows recovery CD/DVD was "bitlocker</span> > compatible,"<span style="color:green"> > > meaning that if you boot to the CD/DVD, and bitlocker is detected,</span> > then<span style="color:green"> > > it would allow you to authenticate first (which would happen > > transparently in the event you were using basic mode/TPM).</span> > > No, that doesn't work as you expect it. If not boot from your HDD the > boot > code is different and therefore the TPM is blocked. > Bitlocker volumes can be access from the Vista installation > environment > AFAIR only by entering the Bitlocker recovery key (the "numerical > monster") > or by providing a saved key on an usb drive. > > Robert</span> -- groffg Posted via http://www.vistaheads.com Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.