Windows 10: BitLocker Auto-Unlock

/u/realoixer · Apr 9, 2021

I want to have BitLocker enabled, but I want to turn on auto-unlock so I don’t have to continuously enter my BitLocker password. I’ve seen some systems with this setting in Manage BitLocker, but I do not see it on mine. Does anyone know why I don’t see it? Also is there another way to log into my system without entering my BitLocker password? Thanks.

submitted by /u/realoixer
[link] [comments]

:)

Viruzz · Apr 9, 2021

HELP: Automatic BitLocker Unlock.

more clear
0down voteaccepted
I managed to figure out how to fix this. It doesn't use the native auto-unlock function like I was hoping (rather a script that unlocks using a .BEK file, as I mentioned) but it seems to work just as well.

First, you need to create a .BEK file that can unlock the disk. This is the command I used:

manage-bde -protectors -add d: -rk c:\

Substitute d: with whichever drive you want to auto-unlock. The output will look something like this (take note of the "external key file name"):

BitLocker Drive Encryption: Configuration Tool version 10.0.10011
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Key Protectors Added:

Saved to directory c:\

External Key:
ID: {9DDF4900-5E08-479A-8C4C-6ADE2DA00551}
External Key File Name:
9DDF4900-5E08-479A-8C4C-6ADE2DA00551.BEK

Now you need to create the script to unlock the drive. Just create a batch file in the root directory with the following line:

manage-bde -unlock d: -rk C:\[external key filename]

Again, replace d: with the correct drive letter. Replace [external key filename] with the filename you got before.

Finally, you need to tell Windows to run this script at startup, before you log in. (Or at least I needed it to run then, because that's where my desktop, etc. are stored.) Here's how you do that:

Press Win+R and enter gpedit.msc. (This is only in Pro, but so is BitLocker, so that's not an issue here.)

On the left, navigate to Computer Configuration > Windows Settings > Scripts (Startup/Shutdown)

Double-click "Startup" on the right

Click "Add..." and select the batch file you created before.

Click OK and exit Group Policy Editor.

Now you can reboot the computer to test it. You should see your drive automatically unlocked
Click to expand...

Thank you sir, ill try your solution.

Windows Auto unlock ONLY works in case you have Bitlocker on your system drive, because if your system drive is not encrypted auto unlocking other drives means loss of security.
But in my case my system drive is Encrypted with hardware encryption that i password unlock during boot. So auto unlocking Bitlocker drives will do fine for me.

user895068 · Apr 9, 2021

Enable Bitlocker auto-unlock without system drive encryption

turn off bitlocker on the drive you want to auto-unlock

mount this drive as a removable drive
i.e plug it into a usb attached drive unit such as StarTech or many others

boot the system and bitlock the drive and turn on auto-unlock

shutdown the system

mount the drive as a permanent drive

reboot the system and the drive will auto-unlock because windows now thinks
that it is a removable drive

Works For Me with no problems

Woodstockjohn · Apr 9, 2021

Auto-unlock BitLocker "for this user"

I have a laptop running Windows 10 Pro, fully updated. There are several other users on this PC.
Recently, I purchased an external hard disk to back up my “personal” files.
When I used BitLocker to encrypt the HD I learned that the feature I tried to use didn’t work as I thought.
I wanted to set BitLocker to “auto-unlock FOR THIS USER ONLY” and not have the HD files available to the other users.
Instead, it auto-unlocks “FOR THIS PC” and everyone has access to it.
And it remains unlocked even if I sign out; I must either turn off the PC or restart it when I am through.
Worse, this is true even if I don’t use the auto-unlock feature!
I could buy a third-party program to lock my files on the HD, but then why have BitLocker?
Any ideas?

Microsoft, are you listening?

Windows 10: BitLocker Auto-Unlock

BitLocker Auto-Unlock

BitLocker Auto-Unlock

BitLocker Auto-Unlock

BitLocker Auto-Unlock - Similar Threads - BitLocker Auto Unlock

Bitlocker auto unlock 'Element not found'

Bitlocker auto unlock 'Element not found'

Auto Unlock BitLocked drives

Auto Unlock BitLocked drives

Auto Unlock BitLocked drives

Bitlocker not auto unlocking

Bitlocker not auto unlocking

Bitlocker not auto unlocking

Bitlocker Auto Unlock: activated but not working