Windows 10: Turn on Bitlocker without TPM but dont need to fill password at startup

Hello everyone,


I have a question now, I am controlling many desktops and laptops and I need to turn on Bitlocker for all drives. However, I check the bios and some computers dont have TPM module.

I only can turn on TPM by edit gpedit but those computers require password at startup.

Some supervisors and managers dont want to do that.

Therefor, please help to give me a solution.

I want to turn on Bitlocker for the computers which dont have TPM module and those computers don't need to fill password every time shutdowns and turn on.


Many thanks for all asisstance.

Khang

:)

 

Bitlocker without TPM

Hi there,

I'm trying to use Bitlocker without TPM

My version is Windows 10 Home, and I try to follow -

To turn on BitLocker Drive Encryption on a computer without a compatible TPM

1. Click Start, type gpedit.mscin the Start Search box, and then press ENTER.
2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
3. In the Local Group Policy Editor console tree, click Local Computer Policy, click Administrative Templates, click Windows Components, and then clickBitLocker Drive Encryption.
4. Double-click the setting Control Panel Setup: Enable Advanced Startup Options.
5. Select the Enabled option, select the Allow BitLocker without a compatible TPM check box, and then click OK.

You have changed the policy setting so that you can use a startup key instead of a TPM.

1. Close the Local Group Policy Editor.
2. To force Group Policy to apply immediately, you can click Start, typegpupdate.exe /forcein the Start Search box, and then press ENTER.
3. Click Start, click Control Panel, click Security, and then click BitLocker Drive Encryption.
4. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
5. On the BitLocker Drive Encryption page, click Turn On BitLocker. This will only appear with the operating system volume.
6. On the Set BitLocker Startup Preferences page, select the Require Startup USB Key at every startup option. This is the only option available for non-TPM configurations. This key must be inserted each time before you start
   the computer.
7. Insert your USB flash drive in the computer, if it is not already there.
8. On the Save your Startup Key page, choose the location of your USB flash drive, and then click Save.
9. On the Save the recovery password page, you will see the following options:

· Save the password on a USB drive. Saves the password to a USB flash drive.

· Save the password in a folder. Saves the password to a folder on a network drive or other location.

· Print the password. Prints the password

While I have a problem on step 4.

Double-click the setting Control Panel Setup: Enable Advanced Startup Options.

I can find "BitLocker Drive Encryption" on my group policy editor, while I cannot find
Control Panel Setup: Enable Advanced Startup Options anywhere.

Thank you for your help.

Best Regards,

Yan

 

Bitlocker + TPM + Startup Password

Hi All

I have a laptop with a TPM 1.2 module and running Windows 10 Pro. I have enabled Bitlocker on the drive, but at present it is just booting straight into Windows.

What I would like is to configure it so that the computer prompts me to enter a password on boot. Currently I am only able to find the option to enter a PIN or use a key. On my previous computer I had a 48 character complex password on boot and I would like
to replicate this using Bitlocker.

Is it possible to use Bitlocker with the TPM module and have it prompt for a password on boot?

Thanks

 

BitLocker Setup- How Do I Disable the TPM and Use a Password Instead?


I would like to enable BitLocker on my laptop, which has a TPM. However, I want to use a password instead of the TPM to decrypt the drive during pre-boot.

I've tried disabling the TPM (using 'tpm.msc') and then enabling "Require additional authentication at startup" within the Group Policy Editor, but those steps didn't work.

How can I disable the TPM and use a password instead? Alternatively, how can I keep the TPM enabled but also require a password (not a PIN) during pre-boot?

Thanks!