Windows 10: Bitlocker hardware encryption

Im thinking to setup bitlocker but I still dont fully understand how it works. The software encryption part seems simple but how does bitlocker works with the SSD's hardware encryption?

There are some articles about how bitlocker trusting the SSD's encryption that had vulnerability, so they defaulted to software encryption now. This sounded like bitlocker isn't "utilizing" the hardware encryption feature but rather just enabling it. I also saw somewhere that you need to enable it in the BIOS. If so, do we even need bitlocker for hardware encryption?

Can I also partition my SSD and hardware encrypt only one of the partition? Or does hardware encryption only works with the entire drive?

submitted by /u/lysnnn
[link] [comments]

:)

 

BitLocker Encrypted Hard Drive to MAC

Hi,



Thank you for posting your query in Microsoft Community. I regret the inconvenience caused to you. Let me help you.



I suggest you to perform below mentioned steps to disable BitLocker.

To disable BitLocker I would suggest you try the following steps and see if it helps.

• 
  Press Windows key + X and click on
  Control Panel.
  
• 
  Change View by from Category
  to Large Icons/Small Icons.
  
• 
  Click on BitLocker Drive Encryption and click on
  Turn BitLocker Off.
  
• 
  Follow on screen instructions. Click on Decrypt the Drive
  when the message appears.
  

I would suggest you click on the link below and refer the following article.

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

(You can refer the steps in the above link as they are applicable for Windows 10 as well)



Check if it helps.



I hope the information helps. Please keep us posted on the issue. We will be happy to assist you accordingly.

Thank you.

 

BitLocker hardware encryption cannot be activated on Win10 10586/1511

Hey,

I'm having trouble enabling hardware encryption with BitLocker using Windows 10 build 10586 on a clean install with a Samsung 850 SSD. The encryption worked flawlessly before on build 10240.

I've spent hours and attempted multiple solutions and made several tests.

As mentioned, on the same machine, if clean installing build 10240 (RTM, before November update) right now, the encryption works.

I have UEFI on with Legacy/CSM off, Fast Boot on, Secure Boot on, and a clean GPT installation after using the 'diskpart clean' command.

As always, it's required to change a group policy to allow additional authentication at startup. I did that.

On a clean installation of build 10586, the wizard will say 'parameter is incorrect' when attempting to start encryption.

Microsoft did announce some BitLocker-related changes for build 10586: https://technet.microsoft.com/en-us/library/mt403325

There are also new group policies added. I've tried all combinations. They now allow you to try and force a specific encryption cipher. Samsung uses XES-AES256. I tried forcing that (as well as all other combinations) but the same error returns.

Now, here's where it gets interesting, and possibly why no reports about this have surfaced yet:
If you enable the encryption on build 10240, and then upgrade to 10586, the encryption will remain and will work properly on build 10586.

If you then attempt to 'Reset this PC', and choose the 'keep nothing' option, it will warn you that BitLocker will be disabled. Once it's done cleaning, if you attempt to enable encryption, it will again show the error.

Even if you don't reset the PC, but simply disable BitLocker on 10586 and then attempt to re-enable it, it will no longer work.

tl;dr: Hardware encryption via BitLocker on build 10586 cannot be enabled on a clean install. Currently-known workaround is installing 10240, encrypting it, then upgrading to 10586.

Any solutions would be appreciated, thanks!

 

(BUG) BitLocker eDrive hardware encryption

Hi,

I did a clean install of Windows 10, and tried to use hardware encryption via BitLocker on my eDrive compliant 850 EVO ssd.

First it just would not use the hardware encryption (asks if I want to encrypt whole drive or only used portion) but I found that Intel rapid storage was conflicting with the process (version V14501081)

When I uninstalled IRST, the setup went right, but after the first reboot/system check, BitLocker has just dissapeared. It can't be found in the Control Panel (see screenshot), trying to open it via search doesn't work and it's not listed when right clicking
the system drive, but when right clicking my second HDD there is an option to enable it, this brings me to the initialization screen, the BitLocker settings still can't be accessed. There's also no lock icon on the system drive, but BitLocker does ask for
a password on bootup (don't have TPM).

When typing manage-bde -status C: in the command prompt, I get an error (see screenshot)

screenshot:

https://i.imgur.com/JiHCu3K.png

This worked perfectly on Windows 8.1 for me.

Edit: Now BitLocker suddenly started working properly. The lock sign is there and the settings are back, still this is strange behaviour.