Hello,

I know some of these questions will be very basic but I just have a few questions I can't get my head around.

I have been tasked with creating a number of secure machines, these machines need to be encrypted and I am stuck between using BitLocker or BeCrypt.

1. Does BitLocker present the user with a pre boot authentication screen before windows starts to decrypt the disk?

2. If yes, is this set of credentials different from the windows logon/domain password? - After some reading it seems like a secure PIN is used but I l also believe that this PIN is not unique and all users would have the same PIN to unlock the disk then a different set of credentials to unlock the computer (domain login). Any clarification?

3. Multi -users, these machines will be used by different users. Each user will have their own domain credentials, does BitLocker have any constraints in this area?

If BitLocker was used it will implemented using McAfee Management of Native Encryption. 

Any help would be really appreciated :)

Regards,

Jordan

• Edited by Jordan_ 20 hours 38 minutes ago

1 yes

2 yes, both are unrelated and no sso is possible. All users would have the same PIN, but why would that be a problem?

3 no constraints

Also be aware that you are talking about TPM-features. Without a TPM in the device, the situation would be a little different since there's no PIN possible but only a password or USB startup key.