Security Basics: Re: MS Vista BitLocker - volume or drive?

["Ali, Saqib" <docbook.xml () gmail com>]

it depends on how you set it up.....

If you don't have TPM on your computer, and DON'T want to use a USB
Drive for a Startup key, then you are limited to volume encryption.
i.e. you partition your drive in 2, and encrypt one of the volume. The
unencrypted volume contains the start-up files.

Three alternatives for using BitLocker are:

1) Partition the HDD in 2, and encrypt one volume. This is useful if
you don't have TPM.
2) Use TPM to wrap + bind + store the encryption key
3) Use USB Drive to store the encryption key and startup files.

saqib
http://www.full-disk-encryption.net