Windows 10: Ensuring Bitlocker is Working

I have just read the following quote on the CERT website.


The quote is from Microsoft but is on the CERT site. It has to do with Bitlocker.

*************************


Encryption with BitLocker depends on the correct setting of the Group Policy. More information about this Group Policy can be found via the following location (Microsoft URL). Changing the default setting is not sufficient to mitigate the risk because it does not affect the vulnerability in already encrypted data. Only a complete new installation, including removal and reformatting of data, enforces encryption via BitLocker.


************************


If I am reading this correctly you must not only ensure that Group Policy is set correctly, you must do a complete new installation, removal and reformatting, of data to enforce Bitlocker encryption.


Additional Information from CERT.
*****************************************


According to NCSC-NL, BitLocker as bundled with Microsoft Windows relies on hardware full-disk encryption by default if the drive indicates that it can support this.

To determine whether BitLocker is using hardware-based encryption or software-based encryption:

• Run "manage-bde.exe -status" in an administrator command prompt.

• If the "Encryption Method" starts with "Hardware Encryption", then BitLocker is using the self-encrypting disk's hardware-based encryption implementation.

• If the "Encryption Method" states something other than "Hardware Encryption", such as "AES-128" or "XTS AES-256", then BitLocker is using software-based encryption.
  
  BitLocker's default encryption method can be controlled with Group Policy settings. Configure these settings to force BitLocker to use software-based encryption by default. Once these policy settings have been changed, BitLocker needs to be disabled and re-enabled to re-encrypt the drive with software-based encryption (if not already using software-based encryption).

:)

 

Need to turn off Bitlocker to install Windows 10

Hi,

We suggest doing the following steps again to resolve the issue. To complete the procedure, make sure that you have the following information:

• You must be able to provide administrative credentials.
• The drive must be BitLocker-protected.

To suspend BitLocker Drive Encryption on an operating system drive, please follow the steps below:

• Click Start, click Control Panel, click
  System and Security, and then click BitLocker Drive Encryption.
• Click Suspend Protection for the operating system drive.
• A message is displayed, informing you that your data will not be protected while BitLocker is suspended and asking if you want to suspend BitLocker Drive Encryption.
  
• Click Yes to continue and suspend BitLocker on the drive.

Let us know how it goes.

 

Bitlocker

Hello Nandana,

To enable BitLocker on your computer, you follow the steps below:

• Sign in to your Windows account with an administrator access.
• Press the Windows key.
• Type and enter BitLocker.
• Click Turn on BitLocker.
• If the system is asking to sing in to administrator access, please do so.

For additional information about BitLocker, we suggest that you check the frequently ask question on this
link. The link provided applies to Windows 8.1 to higher version.

If you have other concerns, don't hesitate to reach us.

 

BitLocker Encrypted Hard Drive to MAC

Hi,



Thank you for posting your query in Microsoft Community. I regret the inconvenience caused to you. Let me help you.



I suggest you to perform below mentioned steps to disable BitLocker.

To disable BitLocker I would suggest you try the following steps and see if it helps.

• 
  Press Windows key + X and click on
  Control Panel.
  
• 
  Change View by from Category
  to Large Icons/Small Icons.
  
• 
  Click on BitLocker Drive Encryption and click on
  Turn BitLocker Off.
  
• 
  Follow on screen instructions. Click on Decrypt the Drive
  when the message appears.
  

I would suggest you click on the link below and refer the following article.

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

(You can refer the steps in the above link as they are applicable for Windows 10 as well)



Check if it helps.



I hope the information helps. Please keep us posted on the issue. We will be happy to assist you accordingly.

Thank you.