Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a HP Mini 311-1000CA netbook running Windows 7 Ultimate. I'd really like to encrypt the harddrive using BitLocker but I am unsure as to how to work out if the Mini has a TPM chip or not.

Any ideas?

share|improve this question

4 Answers 4

up vote 4 down vote accepted

I doubt that your netbook has a TPM chip. My HP dv9000 has a fingerprint reader without a TPM chip as well. I also use BitLocker with a USB key. A sure-fire way to see if you have a TPM chip is to run the TPM Management Console (tpm.msc) as an administrator. If you have one it'll show you options relating to managing the TPM and if you don't, well, it'll let you know that too.

To set up BitLocker to use a USB key instead:

  1. Open the Local Group Policy editor (gpedit.msc) as administrator.
  2. Navigate to Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption
  3. Double-click Require additional authentication at startup.
  4. Check the Enabled radio button.
  5. Check the Allow BitLocker without a compatible TPM checkbox.

If you use this option you'll use a USB key to boot (meaning you'll need to keep it with you) and if you loose your USB key there is a recovery key (print it or save it on another computer) that'll let you in. Whenever I travel with my laptop I have my laptop in my bag and have the USB key in my pocket, in case I'm ever separated from it. Believe it or not, it isn't that much trouble to make sure you bring the key, you'll forget it once and that experience will make sure you never forget it again! (Anyone who's had this happen will agree with me I think)

From the help section in the group policy editor:

If you want to use BitLocker on a computer without a TPM, select the "Allow BitLocker without a compatible TPM" check box. In this mode a USB drive is required for start-up and the key information used to encrypt the drive is stored on the USB drive, creating USB key. When the USB key is inserted the access to the drive is authenticated and the drive is accessible. If the USB key is lost or unavailable you will need to use one of the BitLocker recovery options to access the drive.

share|improve this answer
    
+1 :: I like your answer more. I forgot about the GPedit to get USB for Bitlocker deal, and havn't run into the TPM.msc yet, so cool on those. Boo on HP fo a fingerprint scanner without a TPM! -- money spent (by them) on the wrong part of the equation. –  Ƭᴇcʜιᴇ007 Jan 23 '10 at 3:17
    
Yeah, I agree. I think they see the TPM as more of a business level option (my laptop is a consumer laptop) but that fingerprint reader is certainly nice for having a separate admin account (I run as a limited user). My index finger is my main login, middle finger is my local laptop admin login, and my ring finger is my domain admin login. Makes life simple(er)! –  Joshua Jan 23 '10 at 3:50

A surefire way to tell if you computer has a TPM chip is to check Device Manager.

share|improve this answer

Well, I guess that bringing a USB with you whenever you use a computer is inconvenient,and TPM is the best choice, but if your computer doesn't have a TPM, use a Pre-boot PIN to use BitLocker, so that you need the password to unlock your hard drive, and you should also add a password to each User Accounts in Windows, and enable the "Press Ctrl+Alt+Del to logon" option to reduce the chance of some trojan attacks. Because there're a lot of hackers out there somewhere that wanted to steal your information.

share|improve this answer

If your netbook has a finger print scanner, it's probably has a TPM. :)

TPM's require drivers in Windows, so I'd say go check your Device Manager (orb->right-click "Computer"->Manage->Device Manager)

If that's not conclusive, then figure out how to get into your netbook's BIOS and you can probably check there, as the TPM can usually be enabled or disabled there (if there is one).

If it's not there in your BIOS, then you probably don't have one.

Lastly, there are encryption systems available that don't require a TPM.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.