Windows 8 and 8.1 Forums


Why would Asus encrypt the C partition

  1. #11


    Posts : 2,690
    Windows 3.1 > Windows 10


    bitlocker reads any attempt to change anything prior to booting windows as an intrusion of windows security..

    bitlocker requires windows always be the first boot option and that windows be on disk 0

    So any attempt to do other wise locks the drive..

    IE remove the bitlocker disk and trying to read from another PC, drive is locked and needs 48 digit password

    booting to other media and trying to read disk, drive is locked and needs 48 digit password..

    Only way around it is to remove bitlocker encryption..

      My System SpecsSystem Spec

  2. #12


    Posts : 454
    Windows 8.1 Pro with Media Center


    Quote Originally Posted by KYHI View Post
    bitlocker reads any attempt to change anything prior to booting windows as an intrusion of windows security..
    It sounds like you're conflating BitLocker with Secure Boot. I assure you, it's possible to image and restore BitLocker drives including OS drive when not using a TPM and when a UEFI BIOS is in legacy mode.

    IE remove the bitlocker disk and trying to read from another PC, drive is locked and needs 48 digit password

    booting to other media and trying to read disk, drive is locked and needs 48 digit password..
    Nope and nope for the scenario I'm talking about. I can unlock all drives including OS drives on any computer or with tbwinre boot media with manage-bde -unlock [letter] -pw, and the password is the one I created, not the 48 digit recovery key you're calling "password".

    I'm posting this because if someone were to read your post and take it as the whole story, they would likely conclude BitLocker is at best incredibly user-hostile and could not be a viable replacement for TrueCrypt, despite the TrueCrypt devs specifically recommending it. See the thread I linked to in my first post for advantages and disadvantages compared to TrueCrypt (mostly advantages) along with description of what to expect imaging both inside and outside Windows when not using TPM and using non-UEFI BIOS or UEFI BIOS in legacy mode.

    As for using TPM or UEFI BIOS in UEFI (not legacy) mode, I have no idea what happens. According to this Terabyte article, their tbwinre Live CD works in UEFI mode:

    TeraByte Unlimited Knowledge Base

    I would assume their imaging tools work, too, because that's the whole point of their boot media. But I haven't tried it, and I have no idea what complications BitLocker adds in that scenario.
      My System SpecsSystem Spec

  3. #13


    Germany/Florida
    Posts : 4,514
    Vista and Win7


    I would assume their imaging tools work, too, because that's the whole point of their boot media. But I haven't tried it, and I have no idea what complications BitLocker adds in that scenario.
    The problem with imaging is that you cannot recover. In order to recover you have to be able to load the recovery program from CD or USB. But that BIOS allowed only booting from C.

    I suspected Secure Boot to be in the way and wanted to switch that off. That's when I ran again into bitlocker. It requested the key - they even gave a key but that could not be typed into the field that was given. You could only type in numbers but no letters - a real mess.

    Next I tried RECIMG. But that was not supported in their command prompt. Last attempt was AOMEI OneKey which triggers the recovery via the bootmgr. But AOMEI came back saying that they do not support dynamic disks. I guess they could not distinguish between a dynamic disk and a bitlocker locked disk. That's when I gave up and RMAd the thing to the Asus support center in Cal. They will probably flash a different Win 8.1 on the disk.

    The real stupid story is that on our Asus T100 Transformer (which is more or less the same system) the C partition is not locked. A friend got that same T100 a few weeks later, and on their's the C partition is locked. It was said that manage-bde -off C: would take the encryption off. But I am a bit hesitant to experiment with a systems of a friend.
      My System SpecsSystem Spec

  4. #14


    Posts : 2,690
    Windows 3.1 > Windows 10


    My New Dell Venue 8 Pro came with an encrypted disk.. Is it is a soldered on-board chip.. You could not do anything with it until you removed encryption.. And it is not like somebody is going to go through the process to remove and re-install the chip, to view a few useless pics..

    Secureboot is not the same as bitlocker.. secureboot uses certificate keys to allow certain programs to boot before windows.. If the program certificate key does not match the secureboot certificate keys, secureboot rejects the boot and boots into windows..

    Thus why everybody is told to disable secureboot before trying to boot from cd/dvd or usb..
      My System SpecsSystem Spec

  5. #15


    Germany/Florida
    Posts : 4,514
    Vista and Win7


    I understand the difference. But why does bitlocker prevent to disable Secure Boot.
      My System SpecsSystem Spec

  6. #16


    Posts : 2,690
    Windows 3.1 > Windows 10


    Because disabling secureboot will allow programs to boot before windows, bitlocker does not allow it at all..

    you are trying to give permission to one (secureboot) but don't have the permission of the other (bitlocker)
      My System SpecsSystem Spec

  7. #17


    Posts : 454
    Windows 8.1 Pro with Media Center


    Quote Originally Posted by whs View Post
    I understand the difference. But why does bitlocker prevent to disable Secure Boot.
    Maybe because BitLocker is using Secure Boot for integrity validation?

    https://technet.microsoft.com/en-us/...x#BKMK_secboot
      My System SpecsSystem Spec

  8. #18


    Posts : 2,690
    Windows 3.1 > Windows 10


    Nice link for the technical reader
      My System SpecsSystem Spec

  9. #19


    Austin TX metro area
    Posts : 640
    Windows 7 Pro 64bit [MS blue-disk set]


    guys, an earlier poster was correct -- current prices of SSDs and HDs have nothing to do with security/encryption, my bad for mixing the two.
    I was derailed by my earlier experience [DOS 6.22/Windows WFW 3.11 - 240MB HD] of almost having to compress, shrink the files.
    Concerning Bitlocker, it appears to be a very good security program; if I ever install & use it, I best remember all the great advice given here.
      My System SpecsSystem Spec

  10. #20


    Germany/Florida
    Posts : 4,514
    Vista and Win7


    Quote Originally Posted by KYHI View Post
    Because disabling secureboot will allow programs to boot before windows, bitlocker does not allow it at all..

    you are trying to give permission to one (secureboot) but don't have the permission of the other (bitlocker)
    That makes sense, thanks. I finally decrypted one system with the procedure below. The other system is still in the hands of ASUS.

    Windows Key + I and select Change PC settings.
    Navigate to PC and devices -> PC info. At the bottom of the PC info pane, you’ll see a Device Encryption section. Select Turn Off
      My System SpecsSystem Spec

Page 2 of 4 FirstFirst 1234 LastLast
Why would Asus encrypt the C partition
Related Threads
Hey everyone :) Alright, so my ASUS laptop has been getting a little slow lately, so I decided to reinstall. Now I know my PC has an ASUS recovery partition, which reďnstalls the pc with all the tools, drivers etc, since I've used it before. But now when I restart the computer and press F9 and...
I have recently attempted to reset my laptop to factory and i get this issue Computer specs: Asus VivoBook S550CM 8gb Ram 1. 50015 2.50016 HELP, Need more info? please post on thread
I have some problems with my laptop ASUS K55VD. I had windows 8, but with the store of windows I have updated to windows 8.1. I have tried to use the recovery partition, but every time I try appears a message. Failed to reset your computer. A partition of unity necessary is missing. 48360For...
ASUS Recovery partition in Installation & Setup
Hi All, I've read a lot of posts and a little confused. I upgraded ASUS S400CA to 8.1 . I just need to create a recovery disk with the option of copy from recovery partition which is graded out as many of you know. Can you please provide me with the steps of what I will have to do to create a...
I've just received an Asus S301L laptop, with Win8 Pro preinstalled. The owner wants Win8 wiped and Win7 installed along with Scientific Linux. I've disabled secure boot and enabled CSM in the BIOS, thus getting rid of the annoying UEFI boot process, and I'm now able to boot old-style from...
Hello i buy new asus X550CC-XO028H ultrabook with windows 8 preinstalled.I upgrade windows 8 to 8.1 over windows store.I get many erros in event viewer.So now need restore windows 8 from recovery partition.Install all programs and upgrade to 8.1.But i cannot to do this.Windows 8.1 cannot find...
My tablet is running fine, but I did something (not bright) which could leave me in a lurch later. Here's what I did, and what I'm looking for. Soon after I purchased my Asus VivoTab Smart, I made a USB recovery disk, complete with recovery partition. Then, to save disk space on the tablet, I...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook