HBS 5.8.1.0 Beta 260409 - BitLocker tests and bugs I found

[admin]

Thank you for your suggestions. We will work on improving it. My only concern is: where should the BitLocker recovery information be saved? Storing it insecurely would introduce significant risks.

Don't you already save the BitLocker recovery information for the system drive in the backup anyway? How do you manage to keep BitLocker for the system drive and support delta restore now (even when booting directly from WinPE)? You'd need the recovery key for this to work, wouldn't you? Or is it read somewhere from the saved partition in the backup directly?

Thanks!
al3x

Hi al3x,

It is not advisable to save the access key of the target drive in the backup image for the following reasons:
1. The backup image itself may not be encrypted, especially when backing up a non‑BitLocker drive, and the program will not prompt the user to encrypt the image.
2.The backup image may be copied to another partition or even another computer, in which case the access key saved within the image becomes useless.

It is particularly important to note that if the image is not encrypted, the access key can easily be leaked. Therefore, my idea is to only pass the access key to WinPE when automatically booting from Windows into WinPE to perform a restore operation. In this way, the key always remains on the current computer and can be cleared immediately after entering WinPE.

Best regards,