Microsoft Windows technology for full disk(volume) encryption.

learn more… | top users | synonyms

0
votes
1answer
34 views

How to deploy Bitlocker via WDS

Let's say I have a notebook without anything, no software, no operating system. Now I want to install Windows (with some programs) from my WDS. Which works just fine, but how do I tell Windows to ...
0
votes
0answers
30 views

Unlock Bitlocker Encryted Volume With No Mount Point For Windows Server Backup

I would like to be able to automate the unlocking of a Bitlocker volume that has been assigned as a backup drive for Windows Server Backup in 2012 R2 Essentials. Server backup removes the mount point ...
2
votes
0answers
44 views

Bitlocker says PIN is incorrect

I have new batch laptops to image, almost all of them are done but 2 of them (same models) have an issue I can't resolve. I enable bitlocker and make sure that its also recoverable by PIN. This works ...
1
vote
0answers
66 views

Bitlocker data drive opens as read only -

I have a virtualized Windows Server 2012R2 running on ESXi 6.0 There are 2 virtual disks in this system, an unencrypted C drive for the OS and a Bitlocker encrypted D drive for data sharing. Bitlocker ...
0
votes
1answer
107 views

How can I automatically unlock a Bitlocker To Go hard drive if no user is logged on?

I'm using external USB hard drives to backup my server (Windows Server Backup). These drives are encrypted by Bitlocker To Go. I configured the disks to get unlocked automatically, because they are ...
3
votes
0answers
186 views

How do I fix a non-starting “Microsoft Key Distribution Service”? (not to be confused with Kerberos KDS)

The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events: Event ID 4001 Group Key Distribution ...
1
vote
1answer
148 views

Can't Enable Bitlocker

Why not?! How can I find out why not? I recently enabled Bitlocker without TPM in our domain controller: Update Thanks to Greg's 2nd comment I've discovered that I need a basic disk: ...
0
votes
1answer
417 views

Bitlocker without TPM on Hyper-V 2012 r2 from the command line?

I know that Bitlocker can be used from a Hyper-V Server 2012 r2 install. And I know that it can be done on a machine that lacks a TPM chip. The problem is that all of the examples I've found depend on ...
2
votes
1answer
152 views

Hyper-V Guest data encryption

I have a new requirement to encrypt the data inside an sql database while it is at rest. So far I've looked at Bitlocker (see below), and other commercial products (I won't name because I'm not ...
0
votes
1answer
47 views

Unable to perform enable-bitlocker and lock-bitlocker successively

I am trying to enable bitlocker on windows server 2012 R2 data volume using following command: Enable-BitLocker -MountPoint $volume -Password ($password | ConvertTo-SecureString -AsPlainText -Force) ...
1
vote
1answer
283 views

Automatic unlock bitlocker to go (usb stick) on domain computer

Is there a way to automatically unlock bitlocker encrypted USB sticks on windows computers that are domain joined (8.1 Enterprise)? (e.g., based on the "BitLocker identification Field"?) The scenario ...
2
votes
1answer
667 views

How can I input password to manage-bde -pw option via windows powershell

I am trying to encrypt Data volume (for example E:) with the following command: manage-bde -protectors -add E: -pw When I execute the above command, it will ask for the password, so I entered it. ...
3
votes
1answer
369 views

Bitlocker device name change

When imaging our PCs we generally create a temp name for our facilities to change the device name to whatever particular department fits their needs. The issue is we can't send out any devices without ...
0
votes
1answer
139 views

Setting up Bitlocker on a VNX5300 Network Access Storage ( NAS )

Whether it is possible to have Bitlocker ( Windows 2008 Server - Encryption ) enabled on NAS Storage Server which is access by multiple users ? We are using VNX 5300 NAS Storage.
-3
votes
1answer
70 views

How to retrieve a file from Bitlocker enabled HardDrive? [closed]

How to retrieve a file from Bitlocker enabled HardDrive ? We have 400 GB of Image files which we want to encrypt our Hard Drive for data protection. We are exploring Bitlocker on our Windows 2008 ...
0
votes
1answer
46 views

Data security for PII

I have a question regarding data security. I have an application that dumps a flat Excel file on a Windows server from an SAP database. The file is edited, then the application writes the edited ...
1
vote
1answer
121 views

BitLocker Already Configured Issue

System Configuration: Windows Server 2008 R2 Standard Disk Configuration: RAID1 We have a newly built system that is joined to a domain and has the proper GPOs for BitLocker already setup. We ...
2
votes
1answer
340 views

BitLocker Group Policy Requirements

I am looking for help with creating a BitLocker policy through Group Policy. I have failed doing this myself and need help from those more experienced than I am. Server: Windows Server 2012 Clients: ...
1
vote
1answer
4k views

Can't store TPM information in AD

I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
1
vote
1answer
369 views

BitLocker chkdsk error

Utilizing internal USB drives on the motherboard I have been attempting to implement BitLocker onto our physical servers. I have tried 6 of them, all HP servers and all of them give the same error. ...
1
vote
1answer
3k views

Is there any difference between BitLocker's recovery key file and numerical password?

Is there any difference between a BitLocker recovery key file and numerical password that would negatively impact my ability to unlock the drive in a disaster scenario? I frequently encrypt USB hard ...
2
votes
2answers
1k views

BitLocker - No TPM & No Flash Drive

I have done some research on using BitLocker in an environment where the machines do not have a TPM and it appears you will need to utilize a Flash Drive for it to work properly. This seems to be the ...
2
votes
1answer
810 views

Bitlocker Drive cannot save files on this drive

I have a freshly installed Windows 2008 R2 Server with a C drive containing the operating system and d drive as a normal data drive. Ive turned on encryption on the d drive using Bitlocker. The ...
10
votes
2answers
2k views

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
2
votes
2answers
1k views

Windows 8.1 TPM ownership on Server 2008 R2 schema - not to spec?

My organization is running AD DS on Server 2008 R2 schema. Already a bad start, I know, but let's pretend that's impossible to change. In our default domain policy, we have the following setting ...
-1
votes
1answer
48 views

Move bitlocked second drive to new system [closed]

I am to receive a new laptop, and i need to move my second physical drive to the new machine. The second drive is protected with bitlocker. I do not have admin privs on the current machine, so i ...
3
votes
0answers
1k views

Cloning a bitlocker encrypted disk

Our company's had its laptops for just over 2 years now and they have all become slow and many of them have had their harddisks dying randomly lately. I noticed that many of my colleagues use a tilted ...
3
votes
3answers
525 views

How can I prevent the compromise of a Domain Controller on ESX stored in a unsecured location?

A client of ours has a DC that will be located in an insecure location. RODCs and separate domains/forests are not permitted by management. All the servers will be located on a VMWare ESX server. ...
1
vote
3answers
1k views

Bitlocker Auto-Unlock

Can anyone comment on how the auto-unlock feature of bitlocker works. Specifically what I would like to know is how the the unlock key is encrypted and stored and when the unlock process takes place. ...
3
votes
2answers
5k views

Windows Active Directory Bitlocker deployment

I am experimenting with bitlocker deployment via AD at work. Have googled all over the internet, but the most useful reference seems to be: ...
0
votes
1answer
408 views

Why Bitlocker in Windows Server 2008/2008 R2 doesn't support iSCSI drives?

As far as I know Bitlocker in Windows Server 2008/2008 R2 doesn't support iSCSI drives (but version included in Server 2012/Windows 8 does). Why it is so?
2
votes
1answer
8k views

TPM had to be reintialized: Does a new recovery password have to be uploaded to AD?

Some way some how, a user's machine couldn't get read the bitlocker password off of the TPM chip, and I had to enter the recovery key (stored in AD) to get in. No big deal, but once in the machine, I ...
6
votes
1answer
1k views

BitLocker with Windows DPAPI Encryption Key Management

We have a need to enforce resting encryption on an iSCSI LUN that is accessible from within a Hyper-V virtual machine. We have implementing a working solution using BitLocker, using Windows Server ...
5
votes
2answers
1k views

BitLocker Setup requires the drive file system to be NTFS

We are running a new Windows 2008 R2 Server on Dell PowerEdge R620 Hardware. I am trying to enable BitLocker Encryption on the C Drive, I have already enabled the TPM from the BIOS. During the ...
1
vote
1answer
111 views

Bitlocker whole disk encryption on second (non-boot) drive

I'm working on a project where I need to encrypt only the data drive on a machine and I don't want there to be any user interaction at the console on boot. These systems will be running at remote ...
1
vote
1answer
8k views

Reset windows 7 local admin password on encrypted drive [closed]

I have lost administrator password on a windows 7 laptop running bitlocker. I know bitlocker recovery password for this PC and can access BIOS setup. I need to reset administrator password without ...
2
votes
1answer
172 views

Windows Bitlocker to go: How to make drive readonly for other users

I have encrypted a removable drive with Bitlocker to go. I will be giving this drive to another party and want to effectively prohibit this person's ability to write to this drive. This person ...
1
vote
0answers
100 views

Convert to Managed BitLocker

I've been setting up an encryption policy using MBAM; after some trial-and-error, I finally got it working! Adding new laptops is a breeze! However... I have several laptops that were encrypten ...
1
vote
2answers
107 views

securing source code with bitlocker

We need to deploy a web based application at a client site where it will be within their local intranet. Part of our requirement is to provide some basic security to protect our IP. I realise that ...
4
votes
1answer
2k views

unlock-bde application not found error prevalent in Windows 8

I have encrypted a drive with BitLocker in Windows 8 Pro, but the drive will not auto-unlock. I can manually unlock the drive from BitLocker in the Control Panel. However from Windows Explorer, I ...
-5
votes
1answer
606 views

How difficult would it be for a Hacker to get into a BitLocker To Go drive? [closed]

I have a USB Drive protected with BitLocker To Go. I used a User PIN and printed a Recovery Password. I have since lost the Recovery Password and can't remember the PIN. Is there an efficient way to ...
4
votes
1answer
429 views

Dell PowerEdge Server BitLocker Hotswap Hard disks

We have a Windows 2008 R2 Server running on a Dell PowerEdge R310 Server with Bitlocker enabled. There are two physical Hard disks configured as RAID 1. One of the disks recently started having an ...
2
votes
2answers
2k views

Security of BitLocker with no PIN from WinPE?

Say you have a computer with the system drive encrypted by BitLocker and you're not using a PIN so the computer will boot up unattended. What happens if an attacker boots the system up into the ...
1
vote
1answer
177 views

Upgrade Trusted Platform Module (TPM)?

I have some systems that I am unable to enable Bitlocker on. The TPM wizard reports that the version of the TPM is inadequate to function with bitlocker. Is it possible to upgrade a TPM to 1.2?
3
votes
1answer
2k views

Verify who has Bitlocker key backed up via PowerShell?

We currently use Bitlocker on our laptops here at work. The helpdesk are responsible for backing the Bitlocker key up to AD when they build the system. We ran into an issue recently where a user had ...
5
votes
2answers
500 views

Windows Server 2008 BitLocker

I would like to configure whole disk encryption on all of my Domain Controllers. Is BitLocker an acceptable method to do this? What are the potential problems with whole disk encryption on a Domain ...
4
votes
2answers
1k views

BitLocker with TPM but no startup PIN concerns my users - what should I tell them?

My infrastructue uses BitLocker encrypted drives with TPM but no start up PIN. Recovery keys are stored in the AD. A few of my users are worried that no startup PIN is insecure as to the old WinMagic ...
0
votes
1answer
3k views

Failed Dell PERC H700 Firmware Upgrade with Windows 2008 R2 BitLocker Enabled

I attempted to use the Dell openManage Server Update Utility within Windows to update the firmware on the Dell PERC H700 controller and was given the following error: 'The update package cannot be ...
1
vote
1answer
97 views

Does the system volume have to be encrypted before encrypting data volumes, BitLocker?

I am considering using BitLocker to encrypt a server's data partitions. It isn't fully clear in the documentation; does the system volume (partition) need to be encrypted before other partitions on ...
0
votes
1answer
1k views

How to use Bitlocker encryption with Windows Server 2008R2 native disk backup

I'm looking to use BitLocker encryption on my backup disks, used with the native Windows Server backup feature, in 2008R2 server. I'm using BitLocker on all the drives in the system, but the backup ...