Subtitles of the Movie

Now there is one bit of functionality that's new in Windows Server 2008 and that's full volume encryption and I just want to bring it to your attention here, this is a little overview, but I want you to know about this. This was actually introduced in Vista and now in the server product for the first time. Full volume encryption let's us protect data at the file system level. Now this originally came about on the client side because of the security risk that laptops are. We had an issue in the news here in Nashville just a few months ago, where a government employee, rather not a government employee, but at a government office there was a break in and somebody stole a bunch of laptops and they had a bunch of personal taxpayer identification on those laptops, so this was a big huge deal. Thankfully they, the police found out who did the burglary and they broke in and they basically arrested them and found the laptops and everything was fine. So anyway we need to protect our data at the file system level, now on our servers we can do this to protect those servers out in branch office locations, physical security on the servers, not what we wish it was or not what it should be. So we can do this on the server level and again I want to tell you about this and show you how to set it up and then direct you out to some more resources. So, notice we can protect User Files and System Files on a machine and right now we're going to talk about the Windows Server Side. On System Files, this includes swap files and hibernation files as well as data volumes themselves, so this is huge that we can now protect this information even against just actual theft of the hard drive if you will. Now there are some requirements and you need to go out to Microsoft's web site, do a search on full volume encryption and really start to read up on this before you implement it. Now on the Server Side there are some requirements, number one you need two NTFS Disks Partitions, one of these partitions are going to hold your system volume, now that system volume should be at least 1.5 gigabytes in size and it should be set as the active partition. You also need one volume for the operating system and then there are some other ones, your BIOS is involved here, so again go out to Microsoft's web site, do a search on full volume encryption and you'll get all kinds of information about this. This is not a trivial decision to make so you need to prepare for this and look at some system configuration, hardware configuration and so forth. Now to install full volume encryption we're actually going do is add the byte lock feature in the Server Manager. So let's go out to Server Manager and I'll show you this. So here we are at the Desktop and I'll simply click on start Server Manager, I can also go in through administrative tools and bring this up. But notice on features here if I expand features, I'm sorry, if I just click on features then I can go in and add features and you'll notice Bit Locker Drive Encryption, so I will check that, go Next and it's going to start the process of installing this. I'm not going to install it here; this is the way you would kick this off. But again you need to do some research on what all is involved and get your plan together. So anyway, that's Full Volume Encryption, really cool security tool that you can now use on the server itself as well on the Vista side on your clients as well. OK, so read up on it, see what it can do for you.