Why you should be using BitLocker on your servers

re: Why you should be using BitLocker on your servers

Concerned Italian Kid — Fri, 21 Sep 2012 01:49:20 GMT

Just pop that puppy in the microwave and turn it on for 10 seconds and you can bet your files are gone forever...

re: Why you should be using BitLocker on your servers

vince — Tue, 28 Feb 2012 21:17:02 GMT

How do you compare BitLocker to other encryption products

re: Why you should be using BitLocker on your servers

Ajit G — Wed, 04 Jan 2012 19:51:14 GMT

Using BitLocker means the addition of significant overhead to the server environment. When you break it down and look at it from a risk management perspective, a full disk encryption software such as BitLocker protects against theft or loss of devices which typically exists on laptops or mobile devices. Usually the servers are in a locked down data center and the risk of someone who can break in through all the layers of physical security and stealing a server is low.

Instead, I would recommend that folks either degauss or subscribe to a provider and re-route all of your server or SAN drives over for a 3 pass or whatever level overwrite. Much easier, less overhead and you still maintain your security and risk posture.

re: Why you should be using BitLocker on your servers

Nob — Sat, 31 Dec 2011 00:35:43 GMT

Sorry but i think is a VERY bad advice. Using BitLocker isnt a light change, and applying it to all servers is asking for the worse to happen (all servers KO'ed. For good. Time to find another job).

re: Why you should be using BitLocker on your servers

hypothesis — Fri, 23 Dec 2011 08:20:44 GMT

Q1: Ben, do you know software which supports recovery from Bitlocked drive with recovery key?

Q2: What is the preferred setup for running Windows from VHD and Bitlocker? I mean what should you encrypt - the whole host drive or every VHD on it in case there are no sensitive data on the host drive itself?

I wish encrypting be incorporated into VHD standard.

re: Why you should be using BitLocker on your servers

Robert — Fri, 23 Dec 2011 02:51:08 GMT

I prefer running SED disks and not having the performance penalty

re: Why you should be using BitLocker on your servers

Benjamin Armstrong — Thu, 22 Dec 2011 21:30:19 GMT

Josh -

I do not know what the overhead is, most of my servers are not bottlenecked on I/O.

James Feldman -

There is a recovery key that allows you to get the data back in the worst case scenario

How much use is 1 drive out of a raid array anyway?? -

I always use RAID1, so an individual drive has all the data on there

Cheers,

Ben

re: Why you should be using BitLocker on your servers

No Way — Thu, 22 Dec 2011 19:40:45 GMT

Our security officer wants to do this on all our servers as well. After we demo'ed the performance hit to our SQL boxes, he backed off. We pay the extra $$ to keep our bad disks from IBM/DELL/HP and we have them shredded.

re: Why you should be using BitLocker on your servers

Aaron R — Thu, 22 Dec 2011 14:26:39 GMT

You could use a Degausser to remove the data. We use a deguasser for all of our data destruction.

re: Why you should be using BitLocker on your servers

How much use is 1 drive out of a raid array anyway?? — Thu, 22 Dec 2011 11:04:17 GMT

surely it would not be recoverable without the rest of the array? also, best way to trash a hdd is to take the cover off and smash the platters... you also get 2 strong magnets to play with