Free endpoint security check
Companies with best-practice endpoint management are demonstrably better protected. With the free Endpoint Security Check, you can find out how well your devices are protected.
Why do we need Secure Disk for BitLocker?
BitLocker without Secure Disk is hacked in 43 seconds
With the introduction of Microsoft BitLocker and full-disk encryption including the operating system, pre-boot authentication—not the Windows log-on screen—is the most critical technology for endpoint security and integrity.
However, Microsoft BitLocker with TPM and without a PIN—as is common practice in many companies—can be cracked in no time and fails to meet regulatory and cyber insurance requirements. Official Microsoft documentation therefore advises against TPM-only configurations (read more here). Contrary to Microsoft's assessment that hacking TPM-only requires an experienced hacker with significant time, the record time we have encountered is 43 seconds.
Using it with a PIN is an administrative and user-experience nightmare, which inevitably leads to new security vulnerabilities. Furthermore, Microsoft BitLocker is not natively multi-factor capable.
Secure Disk addresses these gaps with multi-factor capable single sign-on pre-boot authentication.
The highlights are:
- High user acceptance through single sign-on for AD & Entra ID
- Multi-factor authentication with Microsoft Authenticator integration
- Easy compliance with legal requirements without operational restrictions
- Software deployment despite active BitLocker encryption and pre-boot authentication
Who is Secure Disk for?
Secure Disk is essential for any company that wants to use Microsoft BitLocker as more than just a facade, and especially for companies subject to NIS2 that need to implement multi-factor authentication for their pre-boot process.
