Microsoft Windows technology for full disk(volume) encryption.

learn more… | top users | synonyms

0
votes
1answer
26 views

Bitlocker without TPM on Hyper-V 2012 r2 from the command line?

I know that Bitlocker can be used from a Hyper-V Server 2012 r2 install. And I know that it can be done on a machine that lacks a TPM chip. The problem is that all of the examples I've found depend on ...
2
votes
1answer
31 views

Hyper-V Guest data encryption

I have a new requirement to encrypt the data inside an sql database while it is at rest. So far I've looked at Bitlocker (see below), and other commercial products (I won't name because I'm not ...
0
votes
1answer
16 views

Unable to perform enable-bitlocker and lock-bitlocker successively

I am trying to enable bitlocker on windows server 2012 R2 data volume using following command: Enable-BitLocker -MountPoint $volume -Password ($password | ConvertTo-SecureString -AsPlainText -Force) ...
1
vote
1answer
78 views

Automatic unlock bitlocker to go (usb stick) on domain computer

Is there a way to automatically unlock bitlocker encrypted USB sticks on windows computers that are domain joined (8.1 Enterprise)? (e.g., based on the "BitLocker identification Field"?) The scenario ...
2
votes
1answer
118 views

How can I input password to manage-bde -pw option via windows powershell

I am trying to encrypt Data volume (for example E:) with the following command: manage-bde -protectors -add E: -pw When I execute the above command, it will ask for the password, so I entered it. ...
3
votes
1answer
51 views

Bitlocker device name change

When imaging our PCs we generally create a temp name for our facilities to change the device name to whatever particular department fits their needs. The issue is we can't send out any devices without ...
0
votes
1answer
56 views

Setting up Bitlocker on a VNX5300 Network Access Storage ( NAS )

Whether it is possible to have Bitlocker ( Windows 2008 Server - Encryption ) enabled on NAS Storage Server which is access by multiple users ? We are using VNX 5300 NAS Storage.
-3
votes
1answer
42 views

How to retrieve a file from Bitlocker enabled HardDrive? [closed]

How to retrieve a file from Bitlocker enabled HardDrive ? We have 400 GB of Image files which we want to encrypt our Hard Drive for data protection. We are exploring Bitlocker on our Windows 2008 ...
0
votes
1answer
25 views

Data security for PII

I have a question regarding data security. I have an application that dumps a flat Excel file on a Windows server from an SAP database. The file is edited, then the application writes the edited ...
1
vote
1answer
59 views

BitLocker Already Configured Issue

System Configuration: Windows Server 2008 R2 Standard Disk Configuration: RAID1 We have a newly built system that is joined to a domain and has the proper GPOs for BitLocker already setup. We ...
2
votes
1answer
132 views

BitLocker Group Policy Requirements

I am looking for help with creating a BitLocker policy through Group Policy. I have failed doing this myself and need help from those more experienced than I am. Server: Windows Server 2012 Clients: ...
1
vote
1answer
1k views

Can't store TPM information in AD

I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
1
vote
1answer
233 views

BitLocker chkdsk error

Utilizing internal USB drives on the motherboard I have been attempting to implement BitLocker onto our physical servers. I have tried 6 of them, all HP servers and all of them give the same error. ...
1
vote
1answer
1k views

Is there any difference between BitLocker's recovery key file and numerical password?

Is there any difference between a BitLocker recovery key file and numerical password that would negatively impact my ability to unlock the drive in a disaster scenario? I frequently encrypt USB hard ...
2
votes
2answers
601 views

BitLocker - No TPM & No Flash Drive

I have done some research on using BitLocker in an environment where the machines do not have a TPM and it appears you will need to utilize a Flash Drive for it to work properly. This seems to be the ...
0
votes
0answers
342 views

Windows Server Backup to iSCSI target 10x slower than copying a file using Windows Explorer to the same location

I'm running a colocation server with Windows Server 2008 R2. As a backup target, I'm using a Linux server run by the datacenter provider. The storage is addressed via iSCSI so that I can use Bitlocker ...
2
votes
1answer
390 views

Bitlocker Drive cannot save files on this drive

I have a freshly installed Windows 2008 R2 Server with a C drive containing the operating system and d drive as a normal data drive. Ive turned on encryption on the d drive using Bitlocker. The ...
10
votes
2answers
655 views

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
2
votes
1answer
756 views

Windows 8.1 TPM ownership on Server 2008 R2 schema - not to spec?

My organization is running AD DS on Server 2008 R2 schema. Already a bad start, I know, but let's pretend that's impossible to change. In our default domain policy, we have the following setting ...
-1
votes
1answer
41 views

Move bitlocked second drive to new system [closed]

I am to receive a new laptop, and i need to move my second physical drive to the new machine. The second drive is protected with bitlocker. I do not have admin privs on the current machine, so i ...
2
votes
0answers
1k views

Cloning a bitlocker encrypted disk

Our company's had its laptops for just over 2 years now and they have all become slow and many of them have had their harddisks dying randomly lately. I noticed that many of my colleagues use a tilted ...
3
votes
3answers
438 views

How can I prevent the compromise of a Domain Controller on ESX stored in a unsecured location?

A client of ours has a DC that will be located in an insecure location. RODCs and separate domains/forests are not permitted by management. All the servers will be located on a VMWare ESX server. ...
0
votes
3answers
755 views

Bitlocker Auto-Unlock

Can anyone comment on how the auto-unlock feature of bitlocker works. Specifically what I would like to know is how the the unlock key is encrypted and stored and when the unlock process takes place. ...
3
votes
2answers
3k views

Windows Active Directory Bitlocker deployment

I am experimenting with bitlocker deployment via AD at work. Have googled all over the internet, but the most useful reference seems to be: ...
0
votes
1answer
250 views

Why Bitlocker in Windows Server 2008/2008 R2 doesn't support iSCSI drives?

As far as I know Bitlocker in Windows Server 2008/2008 R2 doesn't support iSCSI drives (but version included in Server 2012/Windows 8 does). Why it is so?
1
vote
1answer
4k views

TPM had to be reintialized: Does a new recovery password have to be uploaded to AD?

Some way some how, a user's machine couldn't get read the bitlocker password off of the TPM chip, and I had to enter the recovery key (stored in AD) to get in. No big deal, but once in the machine, I ...
6
votes
1answer
1k views

BitLocker with Windows DPAPI Encryption Key Management

We have a need to enforce resting encryption on an iSCSI LUN that is accessible from within a Hyper-V virtual machine. We have implementing a working solution using BitLocker, using Windows Server ...
5
votes
2answers
921 views

BitLocker Setup requires the drive file system to be NTFS

We are running a new Windows 2008 R2 Server on Dell PowerEdge R620 Hardware. I am trying to enable BitLocker Encryption on the C Drive, I have already enabled the TPM from the BIOS. During the ...
1
vote
1answer
96 views

Bitlocker whole disk encryption on second (non-boot) drive

I'm working on a project where I need to encrypt only the data drive on a machine and I don't want there to be any user interaction at the console on boot. These systems will be running at remote ...
0
votes
1answer
5k views

Reset windows 7 local admin password on encrypted drive [closed]

I have lost administrator password on a windows 7 laptop running bitlocker. I know bitlocker recovery password for this PC and can access BIOS setup. I need to reset administrator password without ...
2
votes
1answer
136 views

Windows Bitlocker to go: How to make drive readonly for other users

I have encrypted a removable drive with Bitlocker to go. I will be giving this drive to another party and want to effectively prohibit this person's ability to write to this drive. This person ...
1
vote
0answers
91 views

Convert to Managed BitLocker

I've been setting up an encryption policy using MBAM; after some trial-and-error, I finally got it working! Adding new laptops is a breeze! However... I have several laptops that were encrypten ...
1
vote
2answers
100 views

securing source code with bitlocker

We need to deploy a web based application at a client site where it will be within their local intranet. Part of our requirement is to provide some basic security to protect our IP. I realise that ...
4
votes
1answer
2k views

unlock-bde application not found error prevalent in Windows 8

I have encrypted a drive with BitLocker in Windows 8 Pro, but the drive will not auto-unlock. I can manually unlock the drive from BitLocker in the Control Panel. However from Windows Explorer, I ...
-5
votes
1answer
530 views

How difficult would it be for a Hacker to get into a BitLocker To Go drive? [closed]

I have a USB Drive protected with BitLocker To Go. I used a User PIN and printed a Recovery Password. I have since lost the Recovery Password and can't remember the PIN. Is there an efficient way to ...
4
votes
1answer
363 views

Dell PowerEdge Server BitLocker Hotswap Hard disks

We have a Windows 2008 R2 Server running on a Dell PowerEdge R310 Server with Bitlocker enabled. There are two physical Hard disks configured as RAID 1. One of the disks recently started having an ...
2
votes
2answers
2k views

Security of BitLocker with no PIN from WinPE?

Say you have a computer with the system drive encrypted by BitLocker and you're not using a PIN so the computer will boot up unattended. What happens if an attacker boots the system up into the ...
1
vote
1answer
94 views

Upgrade Trusted Platform Module (TPM)?

I have some systems that I am unable to enable Bitlocker on. The TPM wizard reports that the version of the TPM is inadequate to function with bitlocker. Is it possible to upgrade a TPM to 1.2?
3
votes
1answer
2k views

Verify who has Bitlocker key backed up via PowerShell?

We currently use Bitlocker on our laptops here at work. The helpdesk are responsible for backing the Bitlocker key up to AD when they build the system. We ran into an issue recently where a user had ...
5
votes
2answers
429 views

Windows Server 2008 BitLocker

I would like to configure whole disk encryption on all of my Domain Controllers. Is BitLocker an acceptable method to do this? What are the potential problems with whole disk encryption on a Domain ...
4
votes
2answers
942 views

BitLocker with TPM but no startup PIN concerns my users - what should I tell them?

My infrastructue uses BitLocker encrypted drives with TPM but no start up PIN. Recovery keys are stored in the AD. A few of my users are worried that no startup PIN is insecure as to the old WinMagic ...
0
votes
1answer
2k views

Failed Dell PERC H700 Firmware Upgrade with Windows 2008 R2 BitLocker Enabled

I attempted to use the Dell openManage Server Update Utility within Windows to update the firmware on the Dell PERC H700 controller and was given the following error: 'The update package cannot be ...
1
vote
1answer
89 views

Does the system volume have to be encrypted before encrypting data volumes, BitLocker?

I am considering using BitLocker to encrypt a server's data partitions. It isn't fully clear in the documentation; does the system volume (partition) need to be encrypted before other partitions on ...
0
votes
1answer
1k views

How to use Bitlocker encryption with Windows Server 2008R2 native disk backup

I'm looking to use BitLocker encryption on my backup disks, used with the native Windows Server backup feature, in 2008R2 server. I'm using BitLocker on all the drives in the system, but the backup ...
1
vote
2answers
6k views

Unlock bitlocker disk via cmd

how can I unlock a bitloker-locked disk via batch (or cmd line)? What I need is to replicate the effect of the default action you see in the context menu of the unit (i.e. unlocking temporarly the ...
0
votes
1answer
2k views

Problems enabling BitLocker on Windows 7 enterprise

I had BitLocker turned on originally when I loaded the computer but had to turn it off to do some testing. I recently tried to turn it back on and I continue to get the following error: A required ...
1
vote
2answers
1k views

Bitlocker in Windows 7: how to change from USB key to PIN?

I've just encrypted my drives using Bitlocker but since I don't have TPM, I went with USB key. Is it possible to switch that method to PIN or is it too late now and I have to re-encrypt the drives?
4
votes
2answers
820 views

What is the WMI class to manage BitLockerToGo

I am working on a script that will be used to audit some machines. I can check whether or not volumes are encrypted using the Win32_EncryptableVolume class in root\cimv2\Security\EncryptableVolume. ...
6
votes
8answers
2k views

Recommended drive encryption solution

I will soon be purchasing a number of laptops running Windows 7 for our mobile staff. Due to the nature of our business I will need drive encryption. Windows BitLocker seems the obvious choice, but it ...
1
vote
1answer
1k views

Bitlocker error on Win7 (Domain)

I have Win7 Ultimate 32-bit running and I am trying to enable Bitlocker on the system drive. The system is running in a Win2003 Domain. I have been successful at enabling Bitlocker on other Win7 ...