USB token using certificates

Question

I have a simple question. I am using USB token to sign into my computer using Microsoft Active Directory CA. The question is that if I lose my computer and lands into the wrong hands, can the person take out my disk and put it into another computer and access the information on my hard disk?

Answer 1

The question is that if I lose my computer and lands into the wrong hands, can the person take out my disk and put it into another computer and access the information on my hard disk?

yes. Smart card eliminates password for sign-in, it doesn't protect your data on your disks. You have to use a feature called BitLocker to transparently encrypt your hard drives: https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview
If anyone gets your PC and attempts to install drives to another PC, attacker won't be able to read your data.

BitLocker turn on is easy: https://support.microsoft.com/en-us/windows/turn-on-device-encryption-0c453637-bc88-5f74-5105-741561aae838

ensure that you have saved somewhere (outside of your PC) recovery codes in case you need to replace hardware or loose access to your installation.