Trusted Platform Modules and USB Keys
Ok, perhaps I am missing the point here.......
I intend to implement BitLocker across our Staff Laptops. Currently they use EFS to protect them. I intend to use TPM and a PIN.
Problem: >50% of our laptops do not have a TPM, so will need a usb 'key'. This is a training nightmare, and I can see our staff losing keys etc.
Question 1: If I purchase some very small (5mm) USB drives to use as keys and instruct staff not to remove them on pain of death, then also force a PIN as well is that any different than using a built in TPM and PIN? (Apart from the tpm being removable?).
Question 2: Where can I get some cheap 5mm USB drives? (They do not need massive amounts of storage)
I don't know much about Trusted Platform Modules and Encryption, so apologies if I have missed the point. I shall be researching them tomorrow!