Windows 10: Turn On BitLocker for Windows 10 Operating System Drive without TPM

You can choose how to unlock the operating system drive when you turn on your PC with a PIN (requires TPM), Password, or a Startup key on a connected USB flash drive. In this post, we will show you how [...]

This post Turn On BitLocker for Windows 10 Operating System Drive without TPM is from TheWindowsClub.com.

read more...

 

How to Use Bitlocker on Only Non System Drive and without TPM


I want to use Bitlocker on my Non System E Drive without TPM. I read somewhere to do the following for without TPM:

" Under Local Computer Policy navigate to Computer Configuration \ Administrative Templates \ Windows Components \ Bit Locker Drive Encryption \ Operating System Drives and double click on Require additional authentication at startup." and so on.

but I am confused because the above note is mentioning "Operating System Drives " wherein I want to turn on Bitlocker on Non System Drive.

Can we turn bitlocker "on" on Non System Drives without turning it "on" on System Drives and Can we turn it "on" on
a Single Folder instead of Drive.

Please advise step by step.

 

Bitlocker without TPM

Hi there,

I'm trying to use Bitlocker without TPM

My version is Windows 10 Home, and I try to follow -

To turn on BitLocker Drive Encryption on a computer without a compatible TPM

1. Click Start, type gpedit.mscin the Start Search box, and then press ENTER.
2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
3. In the Local Group Policy Editor console tree, click Local Computer Policy, click Administrative Templates, click Windows Components, and then clickBitLocker Drive Encryption.
4. Double-click the setting Control Panel Setup: Enable Advanced Startup Options.
5. Select the Enabled option, select the Allow BitLocker without a compatible TPM check box, and then click OK.

You have changed the policy setting so that you can use a startup key instead of a TPM.

1. Close the Local Group Policy Editor.
2. To force Group Policy to apply immediately, you can click Start, typegpupdate.exe /forcein the Start Search box, and then press ENTER.
3. Click Start, click Control Panel, click Security, and then click BitLocker Drive Encryption.
4. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
5. On the BitLocker Drive Encryption page, click Turn On BitLocker. This will only appear with the operating system volume.
6. On the Set BitLocker Startup Preferences page, select the Require Startup USB Key at every startup option. This is the only option available for non-TPM configurations. This key must be inserted each time before you start
   the computer.
7. Insert your USB flash drive in the computer, if it is not already there.
8. On the Save your Startup Key page, choose the location of your USB flash drive, and then click Save.
9. On the Save the recovery password page, you will see the following options:

· Save the password on a USB drive. Saves the password to a USB flash drive.

· Save the password in a folder. Saves the password to a folder on a network drive or other location.

· Print the password. Prints the password

While I have a problem on step 4.

Double-click the setting Control Panel Setup: Enable Advanced Startup Options.

I can find "BitLocker Drive Encryption" on my group policy editor, while I cannot find
Control Panel Setup: Enable Advanced Startup Options anywhere.

Thank you for your help.

Best Regards,

Yan

 

"Unexpected network error" on BitLocker operating system drive encryption installation

Hello there,

I recently did a clean reinstall of Windows 10 Pro on my desktop PC. After installing Windows, I wanted to enable BitLocker on all my hard drives. This worked on the "Fixed data drives" without any problem, but I can't seem to get it working on my OS drive.

Whenever I want to enable BitLocker on the OS drive, I only get to the point where I can choose to run the "BitLocker system check". If I do, the system restarts, then nothing happens, the BitLocker overview page in the Control Panel lets me enable BitLocker again.

If I choose to not perform the system check and click on "Start encrypting", an error will appear on the window, stating "An unexpected network error occurred."





What I tried to do to fix the problem:

• Clear the TPM from within Windows
• Clear the TPM in the UEFI
• Disable the TPM in the UEFI (BitLocker didn't want to start, as expected)
• Reenable TPM
• Reinstall Windows

So what can I do to enable BitLocker on my Operating system drive too?