Windows 10: How to set Bitlocker to automatically encrypt again after changing hardware

Hello Team, The laptops automatically enable BitLocker encryption when the system is installed. When we change the hardware, normally we need to enter the recovery key, but I need to enter the recovery key every time when the laptop reboots. I want to know if we can set BitLocker to automatically encrypt again after changing hardware? thanks.

:)

 

Bitlocker - Hardware encryption

Hello,

I changed the "Require additional authentication at startup" setting as in your screenshot. But I still don't have a pin code to choose from and bitlocker still encrypts software (XTS-AES 128) not hardware encryption.

 

BitLocker hardware encryption cannot be activated on Win10 10586/1511

Hey,

I'm having trouble enabling hardware encryption with BitLocker using Windows 10 build 10586 on a clean install with a Samsung 850 SSD. The encryption worked flawlessly before on build 10240.

I've spent hours and attempted multiple solutions and made several tests.

As mentioned, on the same machine, if clean installing build 10240 (RTM, before November update) right now, the encryption works.

I have UEFI on with Legacy/CSM off, Fast Boot on, Secure Boot on, and a clean GPT installation after using the 'diskpart clean' command.

As always, it's required to change a group policy to allow additional authentication at startup. I did that.

On a clean installation of build 10586, the wizard will say 'parameter is incorrect' when attempting to start encryption.

Microsoft did announce some BitLocker-related changes for build 10586: What's new in Windows 10, versions 150 <meta pro <meta prop.microsoft.co <meta prope new in Windoand 1511)?

There are also new group policies added. I've tried all combinations. They now allow you to try and force a specific encryption cipher. Samsung uses XES-AES256. I tried forcing that (as well as all other combinations) but the same error returns.

Now, here's where it gets interesting, and possibly why no reports about this have surfaced yet:
If you enable the encryption on build 10240, and then upgrade to 10586, the encryption will remain and will work properly on build 10586.

If you then attempt to 'Reset this PC', and choose the 'keep nothing' option, it will warn you that BitLocker will be disabled. Once it's done cleaning, if you attempt to enable encryption, it will again show the error.

Even if you don't reset the PC, but simply disable BitLocker on 10586 and then attempt to re-enable it, it will no longer work.

tl;dr: Hardware encryption via BitLocker on build 10586 cannot be enabled on a clean install. Currently-known workaround is installing 10240, encrypting it, then upgrading to 10586.

Any solutions would be appreciated, thanks!

 

HELP: Automatic BitLocker Unlock.

Please help,
Looking for a way( script or maybe some unknown windows command or registry hack) to automatically unlock a non OS BitLocker encrypted drive on Log-In.

My situation: Right now my OS SSD Samsung 840 Evo has a boot password, its not Bios option nor windows eDrive but the third one, the one you need 3rd party software to activate it, had to purchase EMBASSY Security Center to do it.
No issues here, the OS drive is locked and encrypted.

One of My HDD Drives is encrypted with Bitlocker, so every time my PC is booted, I need to enter windows log-in password and then open my computer and enter another password to unlock the drive.
Whats worse is that unlike the SSD that needs unlock password only after full shutdown the Bitlocker needs it every log-in.

Windows has an option to Automaticlly unlock all BitLocker drives on boot, BUT the issue here is that this official option only works if your OS drive is also BitLocker encrypted and then log-in password unlocks everything.

Im looking for maybe a windows Script or some Hidden command to automatically unlock the BitLocker drive.

Even if it Sounds insecure like having the actual password somewhere in the registry, text file or script I dont care because the OS drive is encrypted and passworded.
Also I have a TPM chip I can encrypt any file/folder so even if file is copied from my PC when its fully unlocked the files wont be readable anywhere unless unencrypted before.

If its important im on 8.1 pro 64bit

P.S. If there is no solution for my problem then my only choice is when windows 10 comes out to do a clean install on another Samsung 840 Evo that was previously cleared and eDrive option enabled


Thanks in advance.