Trusted Platform Modules and USB Keys

[Mr.Ben]

Ok, perhaps I am missing the point here.......

 

I intend to implement BitLocker across our Staff Laptops. Currently they use EFS to protect them. I intend to use TPM and a PIN.

 

Problem: >50% of our laptops do not have a TPM, so will need a usb 'key'. This is a training nightmare, and I can see our staff losing keys etc.

 

Question 1: If I purchase some very small (5mm) USB drives to use as keys and instruct staff not to remove them on pain of death, then also force a PIN as well is that any different than using a built in TPM and PIN? (Apart from the tpm being removable?).

 

Question 2: Where can I get some cheap 5mm USB drives? (They do not need massive amounts of storage)

 

I don't know much about Trusted Platform Modules and Encryption, so apologies if I have missed the point. I shall be researching them tomorrow!

Edited February 28, 2011 by Mr.Ben