Encrypting a non-hrh laptop

Transcription

1 Encrypting a non-hrh laptop The purpose for data encryption is to provide data security. We have chosen to deploy the encryption technology of TrueCrypt. After encrypting your system drive your data will be safe from anyone who does not have access to the password you provide during installation. You will be prompted for your password at boot up before any Windows drivers are loaded. Even in the event that a thief removes the hard drive and connects it as a slave drive on another system your data will be safe All TrueCrypt functions are in the background and transparent to the user. You will not need to change or alter any procedures or keystrokes. TrueCrypt will require the system password you provide every time the computer is restarted. You can learn more about TrueCrypt capabilities at: The TrueCrypt application is used to encrypt the drive. The ISO Recorder application is used to create a backup of the encryption key. The following instructions assume you are encrypting the boot drive of a Windows XP 32 bit computer. Other operating systems are supported in both TrueCrypt and ISO Recorder Windows 2000 Windows Vista Windows 7 Mac OS X Linux Step 1: Installing TrueCrypt Page 2 Step 2: Installing ISO RECORDER Page 6 Step 3: Encryption Setup Page 11 Step 4: Writing the Rescue File Page 16 Step 5: Encrypting the Drive Page 20 1

2 Step 1: Installing TrueCrypt 1:A Open internet browser and navigate to Click the download button and select Run for the appropriate version of TrueCrypt 1:B Click Run If you see The Publisher could not be verified. Are you sure you want to run this software? Click Run 2

3 1:C Check I accept and agree to be bound by the license terms and click Accept 1:D Retain the default setting Install and press Next 3

4 1:E Retain default settings and click Install 1:F Click OK 1:G You may want to read and/or print this information. 4

5 1:H Click Finish 5

6 Step 2: Installing ISO RECORDER 2:A Download appropriate version of ISO RECORDER from (This website has additional instructions scroll down to read) Click on the appropriate version: (Use the Window key and Break/Pause to show Windows version.) If you choose v2 you will need to choose the 32bit or 64 bit build. Most Windows XP computers have 32 bit sytems. 2:B Use the Window key and the Pause/Break key combination to see System Properties. A 32 bit system is not usually noted. A 64 bit system will be listed as a system property. 6

7 2:C Select the appropriate version 2:D Click Run 7

8 2:E Click Run 2:F Click Next 8

9 2:G Check I agree and click Next (note: this screen shot taken before checking I Agree ) 2:H Click Next 9

10 2:I Click Next 2:J Click Close Close the internet browser window 10

11 Step 3: Encryption Setup 3:A Double click on the new TrueCrypt icon on your desktop TrueCrypt 3:B Select System and Encrypt System Partition/Drive 11

12 3:C Type of System Encryption Select Normal Click Next 3:D Area to Encrypt select Encrypt the Windows system partition Click Next 12

13 3:E Number of Operating systems Most systems are Single-boot. See the notes under Multi-boot, click appropriate button and click Next 3:F Retain the default setting (below) and click Next 13

14 3:G Enter bootup password and confirm. (The notes are helpful.) Leave Use keyfiles unchecked. Click Next 3:H If the password is too short or simple, TrueCrypt will warn, but allow you to continue. 14

15 3:I Read the note and click Next 3:J Keyes Generated Click Next 15

16 Step 4: Writing the Rescue File Using ISO WRITER 4:A Select the contents of the path for the ISO file by using the mouse and copy This can be done by clicking in the path window (left of Browse button. Ctrl-A will select all Ctrl-C Will Copy the contents to the clipboard. Place a new, writable CD or DVD in the writer Click Next 16

17 4:B Insert a new, blank writable CD or DVD in the burner. (Cancel any auto-run applications that may start) Click Next 4:C THE FOLLOWING WILL ONLY BE SEEN IF YOU DO NOT HAVE A CD OR DVD DRIVE If you do not have a writable CD or DVD or a writable CD or DVD drive, select Write file to USB drive 17

18 4:D Open Explorer by right-clicking on Start In the Address window paste the path for the ISO file by right-clicking and selecting paste remove the name of the file which is at the end of the pasted information. Filename is TrueCrypt Rescue Disk.iso Press Enter Right-click on the ISO file that you see in Explorer and select Copy Image to CD Click Finish The TrueCrypt Rescue Disk.iso file has been written to the media. The CD door may open after writing. Close the door again with disk inserted. 18

19 4:E Click Next for TrueCrypt to verify the Image disk. If Rescue Disk Verified is displayed, you may remove the disk and continue. (After removing the disk, write computer description and date along with TrueCrypt Rescue Disk and place in a safe location) You may need to use Explorer to verify the Image disk. Navigate to the removable drive just written to insure it is reported as a TrueCrypt Rescue Disk If Rescue Disk Verified is NOT displayed, return to Step 3 4:F Wipe Mode should be None (fastest) Click Next 19

20 Step 5: Encrypting the Drive 5:A Read the System Encryption Pretest information. Click Test 5:B Read, Print and Click OK Your system will restart and begin encrypting the drive. Be sure the computer is connected to a good power source. 20

21 5:C Click Yes After the computer restarts, you will be required to enter the new boot-up password. 5:D Click Encrypt 21

22 5:E Click OK 5:F Encryption time can run for 2 hours or longer. Insure the computer has a steady power source. Check back to insure the Encryption process hasn t been interrupted by a screen saver. 22

23 5:G When the encryption process is completed you will see the following: 5:H Click Finish Finished 23