A key for my computer

Forums › Desktop computing › A key for my computer

gnfb

2609 posts

Uber Geek

ID Verified

#157614 6-Dec-2014 12:20

Here he goes again you would have thought I would have learnt by now.....

I want to have a system where I have a usb stick that is required to insert in my computer that will then allow me to enter a pin or password and use said computer.

My concern is
a. if you lose the key
b. if the key fails

Just out of curiosisty is there a physical key system?

Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

I have two shops online allshop.nz patchpinflag.nz
Email Me

sidefx

3712 posts

Uber Geek

Trusted

#1189849 6-Dec-2014 12:29

https://www.yubico.com/

"I was born not knowing and have had only a little time to change that here and there." | Octopus Energy | Sharesies
- Richard Feynman

timmmay

20580 posts

Uber Geek

Trusted

Lifetime subscriber

#1189852 6-Dec-2014 12:31

It's built into some versions of windows. If you lose the key you have to restore from backups. I forget the name of it though.

SirHumphreyAppleby

2847 posts

Uber Geek

#1189865 6-Dec-2014 13:07

timmmay: It's built into some versions of windows. If you lose the key you have to restore from backups. I forget the name of it though.

Bitlocker?

The simplest, assuming you don't trust built-in encryption from Microsoft, is probably TrueCrypt plus the Yubikey (mentioned above) configured with a static key.

Andib

1364 posts

Uber Geek

ID Verified

Trusted

#1189868 6-Dec-2014 13:08

Don't quote me on this but I'm pretty sure bitlocker would cover what you're trying to do

<#
.DISCLAIMER
Anything I post is my own and not the views of my past/present/future employer.
#>

wasabi2k

2096 posts

Uber Geek

#1189916 6-Dec-2014 16:23

physical key?

There are a number of methods to supplement your standard username and password logons - most integrate with the standard logon screen - they integrate with windows/ad using EAP.

Bitlocker et al encrypt the contents of the HDD, then you are required to authenticate to decrypt.

What are you actually trying to achieve?

If you wanted to get low tech - just wire in a standard ignition key/lock into the power switch wiring.

Sideface

9358 posts

Uber Geek

Trusted

Lifetime subscriber

#1189930 6-Dec-2014 17:41

HDD encryption is very secure.
A power supply key/switch would be easy to "hot wire" and offers very little protection.

Sideface

andrewNZ

2487 posts

Uber Geek
Inactive user

#1189931 6-Dec-2014 17:45

There's always these for added "security"

http://gizmodo.com/5910937/self-destruct-buttons-on-this-ssd-ensure-your-data-dies-a-quick-death

http://gizmodo.com/self-destructing-ssds-will-nuke-themselves-if-you-text-1640733628

The first one wired to a tamper switch will ensure your PC is totally unserviceable :)

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

gnfb

2609 posts

Uber Geek

ID Verified

#1190079 7-Dec-2014 10:53

I had a bit of a read about bitlocker I couldnt establish whether it worked with windows 7 as well as 8.1

I will have another look

Thanks for the advice

Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

I have two shops online allshop.nz patchpinflag.nz
Email Me

Brumfondl

1187 posts

Uber Geek

Trusted

#1190099 7-Dec-2014 11:49

gnfb: I had a bit of a read about bitlocker I couldnt establish whether it worked with windows 7 as well as 8.1

I will have another look

Thanks for the advice

Depends on your version of Windows 7. You need Enterprise or Ultimate.

Brumfondl

nathan

5695 posts

Uber Geek
Inactive user

#1190362 8-Dec-2014 09:46

Device Encryption is also on for all versions of Windows 8 once you login or associate your acccount with a Microsoft Account

If you want to use the USB key or + Pin etc in Windows 8 you will need the Professional version or higher

gnfb

2609 posts

Uber Geek

ID Verified

#1190451 8-Dec-2014 11:07

Does anyone on a daily basis use bitlocker ?

Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

I have two shops online allshop.nz patchpinflag.nz
Email Me

nathan

5695 posts

Uber Geek
Inactive user

#1190455 8-Dec-2014 11:11

gnfb: Does anyone on a daily basis use bitlocker ?

yes every Windows machine I use has BitLocker enabled

Some with just TPM (my tablets without a physical keyboard), some with TPM + PIN and another with TPM + USB Startup Key

gnfb

2609 posts

Uber Geek

ID Verified

#1191663 8-Dec-2014 16:00

Ok so far
I have created a Predator USB drive
Source
works fine
I have added my Keepass onto the same usb stick
works fine

Now Cant quite get my brain around this seeing as though I have keepass on the usb key I want to protect access to the usb key
Can I apply bitlocker to the usb key ?
or
will that screw up Predator?

Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

I have two shops online allshop.nz patchpinflag.nz
Email Me

xpd

Geek @ Coastguard NZ
13767 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#1191684 8-Dec-2014 16:21

Bitlocker on approx 150 machines here... the few times its played up, it only takes entering the key in manually to fix.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

nathan

5695 posts

Uber Geek
Inactive user

#1191686 8-Dec-2014 16:23

what is the outcome you want to achieve? You're wanting to have 2factor auth when you boot your PC?

yes you can apply BitLocker to a USB key, no idea if it will screw up Predator. Probably not if you tell Windows to autounlock your USB key when you insert

http://technet.microsoft.com/en-us/magazine/dd490967.aspx