1

enter image description here enter image description here

Why not?!

How can I find out why not?

I recently enabled Bitlocker without TPM in our domain controller:

enter image description here

Update

Thanks to Greg's 2nd comment I've discovered that I need a basic disk:

C:\Windows\system32>bdehdcfg -driveinfo
BitLocker Drive Preparation Tool version 6.3.9600
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Initializing, please wait...

BitLocker Setup requires a basic disk. Convert your dynamic disk to a basic
disk and run BitLocker Setup again.

This could be problematic in my case:

enter image description here

This machine is a Buffalo Terastation - WS5000R2 series.

  • Try it from the command line, and post any messages here. manage-bde -on C: -RecoveryPassword -StartupKey x: where x: is the drive where you want to store the startup key. If you want to store the startup key on the Recovery partition, you will need to temporarily map a drive letter to it. – Greg Askew Aug 19 '15 at 16:50
  • Also, probably should go without saying, you need to have a valid recovery partition. You can run bdehdcfg -driveinfo for more information. – Greg Askew Aug 19 '15 at 16:54
  • A clue from your second suggestion: BitLocker Setup requires a basic disk. Convert your dynamic disk to a basic disk and run BitLocker Setup again. – Ronnie Overby Aug 19 '15 at 17:14
  • See my update above. – Ronnie Overby Aug 19 '15 at 17:20
0

Buffalo should do a better job disclosing that product does not provide any encryption capability (or use disks with builtin hardware encryption for at-rest encryption). I think the solution here would be to acquire another appliance that has encryption and return the Buffalo WSS appliance.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.