Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




1815 posts

Uber Geek
+1 received by user: 109


Topic # 157614 6-Dec-2014 12:20
Send private message

Here he goes again you would have thought I would have learnt by now.....

I want to have a system where I have a usb stick that is required to insert in my computer that will then allow me to enter a pin or password and use said computer.

My concern is
a. if you lose the key
b. if the key fails

Just out of curiosisty is there a physical key system?




Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

 

gnfb on trademe

Email Me


Create new topic
3223 posts

Uber Geek
+1 received by user: 923

Trusted

  Reply # 1189849 6-Dec-2014 12:29
Send private message
14284 posts

Uber Geek
+1 received by user: 2590

Trusted
Subscriber

  Reply # 1189852 6-Dec-2014 12:31
Send private message

It's built into some versions of windows. If you lose the key you have to restore from backups. I forget the name of it though.




AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


 
 
 
 


538 posts

Ultimate Geek
+1 received by user: 203


  Reply # 1189865 6-Dec-2014 13:07
One person supports this post
Send private message

timmmay: It's built into some versions of windows. If you lose the key you have to restore from backups. I forget the name of it though.


Bitlocker?

The simplest, assuming you don't trust built-in encryption from Microsoft, is probably TrueCrypt plus the Yubikey (mentioned above) configured with a static key.

925 posts

Ultimate Geek
+1 received by user: 606

Trusted

  Reply # 1189868 6-Dec-2014 13:08
Send private message

Don't quote me on this but I'm pretty sure bitlocker would cover what you're trying to do

2091 posts

Uber Geek
+1 received by user: 848


  Reply # 1189916 6-Dec-2014 16:23
Send private message

physical key?

There are a number of methods to supplement your standard username and password logons - most integrate with the standard logon screen - they integrate with windows/ad using EAP.

Bitlocker et al encrypt the contents of the HDD, then you are required to authenticate to decrypt.

What are you actually trying to achieve?

If you wanted to get low tech - just wire in a standard ignition key/lock into the power switch wiring.

4362 posts

Uber Geek
+1 received by user: 2663

Lifetime subscriber

  Reply # 1189930 6-Dec-2014 17:41
Send private message

HDD encryption is very secure.
A power supply key/switch would be easy to "hot wire" and offers very little protection.




Sideface


2018 posts

Uber Geek
+1 received by user: 1129


  Reply # 1189931 6-Dec-2014 17:45
Send private message

There's always these for added "security"

http://gizmodo.com/5910937/self-destruct-buttons-on-this-ssd-ensure-your-data-dies-a-quick-death

http://gizmodo.com/self-destructing-ssds-will-nuke-themselves-if-you-text-1640733628

The first one wired to a tamper switch will ensure your PC is totally unserviceable :)




Location: Dunedin



1815 posts

Uber Geek
+1 received by user: 109


  Reply # 1190079 7-Dec-2014 10:53
Send private message

I had a bit of a read about bitlocker I couldnt establish whether it worked with windows 7 as well as 8.1

I will have another look

Thanks for the advice




Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

 

gnfb on trademe

Email Me


988 posts

Ultimate Geek
+1 received by user: 425

Trusted
Subscriber

  Reply # 1190099 7-Dec-2014 11:49
Send private message

gnfb: I had a bit of a read about bitlocker I couldnt establish whether it worked with windows 7 as well as 8.1

I will have another look

Thanks for the advice


Depends on your version of Windows 7. You need Enterprise or Ultimate.

Brumfondl





4993 posts

Uber Geek
+1 received by user: 1327

Trusted
Microsoft

  Reply # 1190362 8-Dec-2014 09:46
Send private message

Device Encryption is also on for all versions of Windows 8 once you login or associate your acccount with a Microsoft Account

If you want to use the USB key or + Pin etc in Windows 8 you will need the Professional version or higher



1815 posts

Uber Geek
+1 received by user: 109


  Reply # 1190451 8-Dec-2014 11:07
Send private message

Does anyone on a daily basis use bitlocker ?




Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

 

gnfb on trademe

Email Me


4993 posts

Uber Geek
+1 received by user: 1327

Trusted
Microsoft

  Reply # 1190455 8-Dec-2014 11:11
Send private message

gnfb: Does anyone on a daily basis use bitlocker ?


yes every Windows machine I use has BitLocker enabled
 
Some with just TPM (my tablets without a physical keyboard), some with TPM + PIN and another with TPM + USB Startup Key



1815 posts

Uber Geek
+1 received by user: 109


  Reply # 1191663 8-Dec-2014 16:00
Send private message

Ok so far
I have created a Predator USB drive
Source
works fine
I have added my Keepass onto the same usb stick
works fine

Now Cant quite get my brain around this seeing as though I have keepass on the usb key I want to protect access to the usb key
Can I apply bitlocker to the usb key ?
or
will that screw up Predator?




Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

 

gnfb on trademe

Email Me


xpd

Chief Trash Bandit
9145 posts

Uber Geek
+1 received by user: 1442

Mod Emeritus
Trusted
Lifetime subscriber

  Reply # 1191684 8-Dec-2014 16:21
Send private message

Bitlocker on approx 150 machines here... the few times its played up, it only takes entering the key in manually to fix.





XPD / Gavin / DemiseNZ

 

Server : i3-3240 @ 3.40GHz  16GB RAM  Win 10 Pro    Workstation : i5-xxxx @ x.xxGHz  16GB RAM  Win 10 pro    Console : Xbox One

 

https://www.xpd.co.nz - Games, geeks, and more.    


4993 posts

Uber Geek
+1 received by user: 1327

Trusted
Microsoft

  Reply # 1191686 8-Dec-2014 16:23
Send private message

what is the outcome you want to achieve?  You're wanting to have 2factor auth when you boot your PC?

yes you can apply BitLocker to a USB key, no idea if it will screw up Predator.  Probably not if you tell Windows to autounlock your USB key when you insert

http://technet.microsoft.com/en-us/magazine/dd490967.aspx

Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.