Windows 10: bitlocker cant be unlocked on an External HDD.

I have an enterprise version of windows and I used it to lock my External Hard Drive to copy some data from the Computer to my Hard disk and now when I am trying to unlock it it doesn't allow me.It always asks me to use use newer version of windows. Exact message - BitlockerD:The BitLocker encryption on this drive isn't compatible with your version of windows. Try opening the drive using a newer version of windows. Can someone please help me on how to solve this issue, I have images of my kid from day she is born in the drive, I want them to be recovered and I am ready to loose every other

:)

 

External USB HDD drive bitlocker encrypted without a key

Hello CatchyWater7200,

Thank you for reaching Microsoft Community. We're sorry for the inconvenience this has caused you.

I am aware that you're having trouble accessing your external USB disk drive that has been encrypted by BitLocker. I am here to help. Allow me to ask a question.

• Would you mind sharing what exactly the message shows when ask for the USB key?
  

Your drive appears to have been encrypted using BitLocker, a function that guards your data against illegal access. For access to the drive, BitLocker requires a password or recovery key. Since you don't have a BitLocker USB key, you can try using the BitLocker recovery key to unlock the drive. Here are the steps to do that:

1. Connect the external USB disk drive to your Surface Pro 6.
   
2. When prompted to enter the BitLocker key, click on "More options". Or you can enter "Esc" key or the Windows key to continue.
   
3. Click on "Enter recovery key".
   
4. Enter the BitLocker recovery key that you found on your Microsoft account.
   
5. Click on "Unlock".
   

If the above steps don't work, you can try disabling BitLocker on the external USB disk drive. Here are the steps to do that:

1. Connect the external USB disk drive to your Surface Pro 6.
   
2. Open File Explorer and right-click on the external USB disk drive.
   
3. Click on "Manage BitLocker".
   
4. Click on "Turn off BitLocker".
   
5. Follow the on-screen instructions to disable BitLocker on the external USB disk drive.
   

Please note that disabling BitLocker will remove the encryption from the external USB disk drive and make it less secure. Therefore, it's recommended to re-enable BitLocker once you've accessed your files and photos.

Let me know how it goes.

Kind regards,

Lavenia

 

HELP: Automatic BitLocker Unlock.

Thank you sir, ill try your solution.

Windows Auto unlock ONLY works in case you have Bitlocker on your system drive, because if your system drive is not encrypted auto unlocking other drives means loss of security.
But in my case my system drive is Encrypted with hardware encryption that i password unlock during boot. So auto unlocking Bitlocker drives will do fine for me.

 

HELP: Automatic BitLocker Unlock.

more clear
0down voteaccepted
I managed to figure out how to fix this. It doesn't use the native auto-unlock function like I was hoping (rather a script that unlocks using a .BEK file, as I mentioned) but it seems to work just as well.

First, you need to create a .BEK file that can unlock the disk. This is the command I used:

manage-bde -protectors -add d: -rk c:\

Substitute d: with whichever drive you want to auto-unlock. The output will look something like this (take note of the "external key file name"):

BitLocker Drive Encryption: Configuration Tool version 10.0.10011
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Key Protectors Added:

Saved to directory c:\

External Key:
ID: {9DDF4900-5E08-479A-8C4C-6ADE2DA00551}
External Key File Name:
9DDF4900-5E08-479A-8C4C-6ADE2DA00551.BEK

Now you need to create the script to unlock the drive. Just create a batch file in the root directory with the following line:

manage-bde -unlock d: -rk C:\[external key filename]

Again, replace d: with the correct drive letter. Replace [external key filename] with the filename you got before.

Finally, you need to tell Windows to run this script at startup, before you log in. (Or at least I needed it to run then, because that's where my desktop, etc. are stored.) Here's how you do that:

• Press Win+R and enter gpedit.msc. (This is only in Pro, but so is BitLocker, so that's not an issue here.)
  
  
• On the left, navigate to Computer Configuration > Windows Settings > Scripts (Startup/Shutdown)
  
  
• Double-click "Startup" on the right
  
  
• Click "Add..." and select the batch file you created before.
  
  
• Click OK and exit Group Policy Editor.
  

Now you can reboot the computer to test it. You should see your drive automatically unlocked