Windows 10: Question On Bitlocker Encryption

I'm trying to make sure my computer is FIPS compliant with government standards of encryption outlined inSP 800-171 Rev 2. As of now, I enabled FIPS mode in the group policy as well as turned Bitlocker off and back on to ensure it is using the proper encryption method. I have one unlock method which is TPM + PIN. My concern is if this method fails modifying hardware or TPM being unable to be read for whatever reason, I need a secondary method to unlock it. Any ideas and/or references to look into? There are a few considerations here.

1. The Recovery Key password pin, is not compliant with standards so can't use that.
2. I also can't use USB drives on this machine grey area with machines containing sensitive information.
3. Machine is standalone not connected to a work server of any sort. Company is remote and in multiple locations.
4. The machine has a secondary drive with some more sensitive information. So the map is C: - OS drive. D: Storage Drive

:)

 

BitLocker Encrypted Hard Drive to MAC

Hi,



Thank you for posting your query in Microsoft Community. I regret the inconvenience caused to you. Let me help you.



I suggest you to perform below mentioned steps to disable BitLocker.

To disable BitLocker I would suggest you try the following steps and see if it helps.

• 
  Press Windows key + X and click on
  Control Panel.
  
• 
  Change View by from Category
  to Large Icons/Small Icons.
  
• 
  Click on BitLocker Drive Encryption and click on
  Turn BitLocker Off.
  
• 
  Follow on screen instructions. Click on Decrypt the Drive
  when the message appears.
  

I would suggest you click on the link below and refer the following article.

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

(You can refer the steps in the above link as they are applicable for Windows 10 as well)



Check if it helps.



I hope the information helps. Please keep us posted on the issue. We will be happy to assist you accordingly.

Thank you.

 

Bitlocker Drive Encryption(Not Responding) at 84.5%

Hi,



Thank you for writing to Microsoft Community Forums.

We understand your concern, as you are trying to encrypt the complete hard drive with BitLocker Drive Encryption and now it’s not responding as well.



We would suggest you to refer this
BitLocker: Use BitLocker Drive Encryption Tools to manage BitLocker article and check manage-bde section, if that helps to make the changes.



However, for further queries we would suggest you to post your query in

TechNet forums, where we have experts and support professionals who are well equipped with the knowledge on BitLocker to assist you with the appropriate troubleshooting steps.



Aditya Roy

Microsoft Community – Moderator

 

Device Encryption not avaiable

Hello Fraczek,

Thank you for contacting Microsoft Community.

We understand your concern in this regard.

• Are you referring to BitLocker Drive Encryption?
• What preventing you from doing this?
• Did you get any error message or code while doing this?

Before you come up with the above information, suggest you to refer the article

Help protect your files using BitLocker Drive Encryption and see if it help you.

Do refer the article
Windows BitLocker Drive Encryption Step-by-Step Guide and check if it help you with the required information.

Keep us posted if you require further assistance.