If you encrypt the drive
that Windows 8 is installed on, other than using a password to unlock the OS drive, you can also make your PC more secure by setting BitLocker Drive Encryption to require a startup key
or use TPM
(if available) for a personal identification number (PIN) to unlock the OS drive whenever you start your PC. You can create either a startup key or a PIN—but not both—when you turn on BitLocker for the first time.
A startup key can be used to store the encryption keys for your operating system drive if your PC doesn't have the Trusted Platform Module
(TPM) security hardware. You can only use a startup key instead of the TPM if your system administrator has set up your network to allow the use of startup keys.
You can't change a startup key after you've created it, but you can make additional copies of it in case you lose the original. If you create backup copies, make sure you store them on separate USB flash drives or other removable media.
This tutorial will show you how to make additional copies of the BitLocker startup key
for the encrypted Windows 8 drive
for safe keeping.
You must be signed in as an administrator
to be able to do the steps in this tutorial.