Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm experimenting with setting up our company laptops with Win7 and BitLocker. There's no TPM available so I'm using the USB startup key option. In my testing I put the encryption key on a MemoryStick flash card and it's working fine.

To test test the system, I copied the encryption key to a USB flash drive and BitLocker doesn't see it there. I tried copying the files to an SD flash card and that worked, so I'm thinking that BitLocker must be remembering the drive to find the key and not just searching all available drives. Is that correct?

Is there any way to change where BitLocker looks for the key?

Also, am I correct in thinking that there's no reason I can't keep numerous startup keys on a single flash disk? I'd like to have a sort of "Master" key that works on any laptop for easier maintainence and as a backup (we're not currently using Active Directory).

share|improve this question

1 Answer 1

up vote 1 down vote accepted

To answer my own question, using the "Manage Bitlocker" option in the control panel allowed me to create a duplicate key onto a USB flash drive and it now allows me to boot from the USB port (the MemoryStick still works as well). I'm not sure exactly what it changed in the boot process, but it worked.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.