Use Bitlocker Encryption without TPM

While doing research on encryption methods for multi-boot netbooks and laptops, I came across this requirement for Vista and Windows 7. Microsoft needs a Trusted Platform Module (TPM Chip) to activate its encryption technology. This chip however, is not present in most lower end notebooks, or in most netbooks either.

There exists a workaround however. In the local group policy there's a setting that will allow you to turn on the ability to use a USB storage device instead of a TPM key to store your encryption key. The catch is, every time you turn on your computer, your USB storage device with the encryption key needs to be plugged in. Otherwise your computer will not boot. Your USB storage device has now become the key to your computer. Here's how to do it....

In Vista:

1. Open up your group policy editor by clicking on Start, then type gpedit.msc,press Enter.
2. Go to Computer Configuration->Administrative Templates->Windows Components->BitLocker Drive Encryption.
3. Right Click on Control Panel Setup->Enable Advanced Startup Options, select Properties.
4. Click Enable. Then, select the Allow BitLocker Without A Compatible TPM checkbox. Click OK

In Windows 7:

1. Open up your group policy editor by clicking on Start, then type gpedit.msc,press Enter.
2. Go to Computer Configuration->Administrative Templates->Windows Components->BitLocker Drive Encryption->OperatingSystem Drives.
3. Right click on Require additional authentication at atartup select Edit.
4. Select Enabled checkbox. Make sure the Allow BitLocker Without A Compatible TPM is selected. Click OK.