Drive encryption on Windows 7 Pro

genny

To comply with new security directives, we need to encrypt a Windows 7 Professional system which has two internal hard discs. It's not on a corporate network, but does have an internet connection.

We know Windows 7 Pro doesn't include Bitlocker but Windows 7 Ultimate does. I've read all sorts of conflicting reports on upgrading to Windows 7 Ultimate to enable Bitlocker to do this, and can't seem to find a definitive answer or step through guide.

The system is based on a Asus p8p67 pro motherboard, which doesn't have its own TPM chip.

We can't upgrade the machine to Windows 10 as it connected to specialist hardware which isn't Windows 10 compatible yet.

What are the options, can we upgrade to Windows 7 Ultimate, enable Bitlocker (without a TPM chip) and fully encrypt both drives, or is it more complex - is there a guide somewhere?

John_Gray

Look up whole drive encryption for the (free) VeraCrypt...

genny

John_Gray wrote: »

Look up whole drive encryption for the (free) VeraCrypt...

Thanks John, we do use Veracrypt for USB sticks, but are being pushed to use Bitlocker for this full systen by the directive as it's used by our government partner.

genny

From what I can glean from Microsoft, they aren't allowing upgrades of Win 7 anymore, so I guess we'll have to explore the third party solution, as we can't move the system to 8 or 10 until our specialist hardware is compatible.

EveryWhere

Is this a machine with a brand name and model number or a custom made machine?

Secondly, have you considered purchasing a Windows 7 Ultimate COA? Found on eBay for £30 or so.

Geodark

EveryWhere wrote: »

Is this a machine with a brand name and model number or a custom made machine?

Secondly, have you considered purchasing a Windows 7 Ultimate COA? Found on eBay for £30 or so.

if they are a legitimate company they probably wont want to do this - COAs aren't the same as buying legitimate product keys. although COA's may work they are not legally transferable.

EveryWhere

Geodark wrote: »

if they are a legitimate company they probably wont want to do this - COAs aren't the same as buying legitimate product keys. although COA's may work they are not legally transferable.

You just made that up, didn't you?

COA are transferable.

If you bought bought a new OEM COA and product key and haven't used it, you can sell it on.

If you purchased a retail key and COA, you can sell it on even though you have used it. But you must have the original proof of purchase etc

EveryWhere

Example, though more expensive; https://www.ebay.co.uk/itm/Microsoft-Windows-7-Ultimate-Full-UK-Retail-DVD-GLC-00181-32-64-bit-DVD-GENUINE/253614260028

Enquire with vendor to ensure they provide traceability for when it comes to audits.

Carrot007

EveryWhere wrote: »

If you bought bought a new OEM COA and product key and haven't used it, you can sell it on.

Well I guess that bit is fine. it's just it cannot be legitimately used on another machine so you would be buying something pointless.


And if you work with government agencies it's best to keep clean.

EveryWhere

Carrot007 wrote: »

Well I guess that bit is fine. it's just it cannot be legitimately used on another machine so you would be buying something pointless.


And if you work with government agencies it's best to keep clean.

Nope. Wrong again. Stop making it up and point to a source that tells you that an unused OEM COA and product key cannot be installed to a machine.
Do you understand the meaning of unused?
I guess that you are assuming the software has already been preinstalled to a machine...in that case it would be....used.

EveryWhere

Similarly, they can purchase an Anytime Upgrade key if it unused or used if it's original use was to upgrade a Retail licence.
So there are options.