Bitlocker on NT 6.1 OS

Mastering Windows Vista for Business Professionals
By Mark Minasi and John Paul Mueller

The following excerpt is from chapter two of Mastering Windows Vista for Business Professionals,

Check out the rest of this chapter, Installing Vista.

Performing a BitLocker Installation of Vista

BitLocker is a new disk encryption technology that comes with Vista. This technique encrypts the entire drive. However, some part of the drive must remain bootable. Consequently, what you really set up with BitLocker is a 2 GB boot partition that isn't encrypted and the remainder of the drive that is encrypted. The technology works despite the 2 GB partition because absolutely everything about your system, including Vista itself, is on the second partition. Only common boot information appears on the first partition. You may have noticed that the setups so far in this chapter are significantly easier and more flexible than previous versions of Windows. Vista really does make a big leap in ease of installation. However, the BitLocker setup requires a little more work on your part. The following sections describe how to set up your system for BitLocker.

Editing System Information and Formatting Drives Using Windows Preinstallation Environment (PE)

Previous versions of the Windows CD Setup program came with a clunky character mode interface that didn't exactly inspire confidence. Vista comes with a miniature copy of Windows that provides the graphical interface that you use normally. This mini-version of Windows is called the Windows Preinstallation Environment (PE). You use it to access all of the features of setup. In this case, you must make a detour to create a special partition setup for BitLocker. The following steps describe how to perform this task.

1. Boot the computer using the Vista installation disk. You'll see Vista start up and Setup asks you for some basic information.
2. Provide the Installation Language, Time and Currency Format, and Keyboard or Input Method. Click Next. Setup presents the main installation option. However, below this option is a link for the System Recovery Options.
3. Click System Recovery Options. You'll see a number of system recovery options, including the option to open a command prompt.
4. Click Command Prompt. Setup starts the familiar command processor. This process depends on the DiskPart utility, which lets you perform low-level manipulation of the hard drive. You can perform an amazing number of tasks, but the essential task, in this case, is creating the correct partition layout.
5. Type DiskPart and press Enter. You'll see the DiskPart prompt. It's easy to obtain help at any time by typing Help and pressing Enter. DiskPart will display a list of commands you can execute.
6. Type Select Disk 0 and press Enter. DiskPart tells you that it has selected the first disk on your hard drive. You always have to select a file system object before you can work with it when using DiskPart. Selecting a drive is always the first step in the process.

   WARNING: This next step is permanent. It removes the partition tables from the selected drive. Make sure you have saved any data you want to save on the drive before you execute this step. Make sure you have selected the correct drive.
7. Type Clean and press Enter. DiskPart erases all of the partition information on the selected drive. This act cleans the hard drive completely; nothing remains behind.
8. Type Create Partition Primary and press Enter. DiskPart creates a new primary partition on the hard drive. This act also selects the new partition automatically so that you can work with it.
9. Type Assign Letter=C and press Enter. DiskPart assigns the letter C to the new partition.
10. Type Shrink Minimum=2000 and press Enter. DiskPart shrinks the new partition by 2,000KB. This new area will hold the actual boot partition. You can increase this value to ensure the disk partition is large enough for updates later. In most cases, you'll want to set the value to at least 4,000 to ensure you can perform updates. Remember that Vista looks at the boot drive, not the data drive, as the basis for later updates.
11. Type Create Partition Primary and press Enter. DiskPart creates a second new primary partition. This smaller partition will hold the boot files and won't be encrypted when you use BitLocker. DiskPart automatically selects this new partition so you can work with it. If you want to work with the first partition you created again, you must use the Select Partition 0 command.
12. Type Active and press Enter. DiskPart makes the second partition the active partition—the one that the system uses for boot purposes.
13. Type Assign Letter=D and press Enter. DiskPart assigns the letter D to the new partition.

    NOTE: The drive letter assignments are only suggestions. If you want to use C for the boot partition and D for the Vista partition, you can certainly do so. Likewise, you might choose to assign Z to the boot partition to keep it at the bottom of drive lists while working in Vista. The point is that you should assign the drive letters based on personal preference and your working habits.
14. Type Exit and press Enter to exit DiskPart.
15. Type Format /y /q /fs:NTFS C: to format the Vista partition. The Format utility formats the partition using NTFS.
16. Type Format /y /q /fs:NTFS D: to format the boot partition.
17. Type Exit and press Enter to close the command prompt.
18. Click the Close button or press Alt+F4 to close the System Recovery Options window. You don't have to click Shut Down or Restart to restart the setup process; Setup already recognizes the new partitions you created.

Performing the BitLocker Installation

Now that you have a shiny new partition you can use for BitLocker, it's time to install Vista. Follow the same procedure that you do for a clean install using the steps in the "Performing a Clean Install of Vista" section of the chapter. However, make sure you choose the correct disk partition for Vista. Since there are two partitions, it's easy to make a mistake. Always install Vista on the first partition you created (drive C: in the example). Setup automatically uses the second partition (drive D: in the example) for the boot files.

The Installation Paths Converge

The installation paths converge when your system reboots and prepares to work with Vista for the first time. No matter how you begin the Vista installation, eventually you'll see a "Please wait a moment while Windows prepares to start for the first time" message. This message appears after the first reboot. Next you'll see an Install Windows dialog box appear that contains a list of tasks that Setup is performing on your behalf. The first few items go fast and then you'll wait for a while at the Completing Installation task. Your system will reboot at least once during this process.

Performing the Initial Setup

Vista performs a lot of work that you used to perform manually in the background, so it may seem like it's taking a long time to complete its work. At some point, you'll see a Set Up Windows dialog box asking you to enter a name and password. The following steps take you through the installation process starting from this point.

1. Type a name and password for your account. Make sure you include a password hint to use to recover your password later should you need to do so. You can optionally choose a different icon from the ones shown. Click Next. The next dialog box asks you to choose a computer name and a background.
2. Type a computer name and optionally choose a background. Click Next. Setup asks you about automatic updates. There's a lot of controversy over setting Windows to use automatic updates after Microsoft made certain optional updates, such as Windows Genuine Advantage (WGA), part of the automatic update. My recommendation is to have Windows ask you about the setting later and then ensure you set Automatic Updates to inform you about required downloads so that you can make the choice.
3. Choose an automatic update option. Setup automatically advances to the next dialog box where you choose the time and date settings for your computer.
4. Select a time zone. Choose the current date (this feature should be set automatically) and change the time as needed. Click Next. You see a final dialog box.
5. Click Start. Windows checks your system performance at this point. Eventually, you'll see a logon screen.
6. Type your password and press Enter.

At this point, you've completed a major part of the setup. Windows will start up for the first time, display the Welcome Center, show Windows Sidebar (with the default gadgets), and perform background tasks such as performing preliminary network configuration.

Configuring the Network

One of the first tasks you'll probably want to perform after you complete the installation is getting your network setup. Fortunately, Vista makes this task very easy. The following steps tell you how to perform this task.

1. Choose Start → Network. You'll see the Network window. Below the menu is a note saying that network sharing and discovery aren't enabled.
2. Choose to enable network sharing and discovery. In most cases, you'll want to choose the private sharing and discovery option. Vista normally discovers the domain or network automatically at this point. However, you might not see the new entries immediately.
3. Right click anywhere in the Network windows and choose Refresh to display the network resources you can access.

Check out the rest of this chapter, Installing Vista.