How to Turn On or Off BitLocker for Fixed Data Drives in Windows 8
InformationBitLocker Drive Encryption provides protection for operating system drives, fixed data drives, and removable data drives that are lost or stolen. BitLocker does this by encrypting the contents of drives and requiring users to authenticate their credentials to be able to access the information.
This tutorial will show you how to turn on or off BitLocker to encrypt or decrypt fixed data drives (ex: internal hard drive) in Windows 8 and 8.1.
You must be signed in as an administrator to be able to do the steps in this tutorial.
This tutorial will show you how to turn on or off BitLocker to encrypt or decrypt fixed data drives (ex: internal hard drive) in Windows 8 and 8.1.
You must be signed in as an administrator to be able to do the steps in this tutorial.
Note- This tutorial does not apply to an operating system drive.
- For a fixed data drive to be BitLocker-protected, it must be formatted by using the exFAT, FAT16, FAT32, or NTFS file system.
- The drive, volume, or partition must be least 64 MB in size.
- Any files saved to an encrypted drive will automatically be encrypted as well.
- Files remain encrypted only while they are stored on the encrypted drive. Files will be decrypted if they are copied on another drive, partition, or PC.
- Users who use BitLocker to protect the content of their personal files can also use File History as it seamlessly supports BitLocker on both source and destination drives.
- If you create a system image or backup of an unlocked encrypted drive, the files in the saved image or backup will be decrypted.
- If you share files with other people, such as through a network, the files are encrypted as long as they're stored on the same encrypted drive, and they can be accessed by authorized people or people you've given permission to.
- You can choose how you want to unlock an encrypted data drive: with a password or smart card. You can also set the drive to automatically unlock when you sign to the PC, if you prefer.
- To be able to automatically unlock fixed data drives, the OS drive that Windows 8 is installed on must also be encrypted by BitLocker.
For more information, see: BitLocker Frequently Asked Questions (FAQ)
WarningBitLocker Drive Encryption is only available in the Windows 8 Pro and Windows 8 Enterprise editions.
OPTION ONE
To Turn On BitLocker for Fixed Data Drive in Windows 8
NOTE: This option will encrypt everything on a selected unencrypted volume or partition (drive letter) from a fixed data drive.
1. If you have not already, choose to use either an AES 128-bit or 256-bit encryption method.
NOTE: Windows 8 uses AES 128-bit encryption by default.
2. Do step 3, 4, or 5 for how you would like to start.
3. Open the Control Panel (icons view), click/tap on BitLocker Drive Encryption icon. Under Fixed data drives, click/tap on an arrow to expand the drive letter you want to encrypt, click/tap on the Turn on BitLocker link, and go to step 6 below. (see screenshot below)
4. In File Explorer, open Computer, right click or press and hold on an unencrypted data drive letter you want to encrypt, click/tap on Turn on BitLocker, and go to step 6 below. (see screenshot below step 5)
5. In File Explorer, open Computer, select (highlight) an unencrypted data drive letter you want to encrypt, click/tap on Manage (Drive Tools) tab, click/tap on BitLocker icon in the ribbon, click/tap Turn on BitLocker, and go to step 6 below. (see screenshot below)
7. Check the box of option(s) you want to use to unlock the drive with, and click/tap on Next when ready. (see screenshot below)
NotePassword = When users attempt to open a drive, they are prompted to enter the password before the drive will be unlocked. Passwords will need to be at least 8 characters long to meet minimum length requirements. Be sure to write down this password, and keep it somewhere safe in case you forget the password.
Note
Smart card = When users attempt to open a drive, they are prompted to insert their smart card and enter the smart card PIN number before the drive will be unlocked. When encrypting a drive by using a smart card, a certificate-based protector is created on the drive. This protector contains some unencrypted information that is required to unlock the drive. The public key and thumbprint of the certificate that was used to encrypt the drive is stored unencrypted in the protector's metadata on the drive. This information could be used to identify the certification authority (CA) that issued the certificate.
Automatic unlock = Fixed data drives can be set to automatically unlock on a computer where the operating system drive is also encrypted. Removable data drives can be set to automatically unlock on a computer running Windows 8 after the password or smart card is initially used to unlock the drive.
8. Select how you want to back up your BitLocker recovery key, and click/tap on Next when finished. (see screenshot below)
NoteIf you forget the password (step 7) for a drive you've encrypted with BitLocker Drive Encryption, or if something happens to your PC that prevents it from accessing the encrypted drive, you can still use a recovery key (a string of 48 random numbers) to get back into the drive.
Note
It's essential that you store a copy of your recovery in a safe place. If you lose it, you might permanently lose access to your files on the encrypted drive.
TipThe Save to your Microsoft account option is only available on non-domain-joined PCs.
Tip
If you saved the BitLocker recovery key to your Microsoft account, you will be able to log in to your Microsoft account online at the Microsoft's site below from any PC to view all of your saved recovery keys at anytime.
9. Select (dot) to encrypt entire drive, and click/tap on Next. (see screenshot below)
10. Click/tap on Start encrypting. (see screenshot below)
NOTE: This may take a long time to finish, but you will still be able to use your PC during the encryption process. Just do not turn off the PC until it has finished encrypting.
11. You will now notice the BitLocker icon in the taskbar notification area. You can click/tap on it to see the encryption progress. (see screenshot below)
12. When encryption of the drive has finally finished, click/tap on Close. (see screenshot below)
13. Unless the encrypted drive is set to auto-unlock (step 7 above), whenever the computer is restarted, any local user (standard or administrator) will need to unlock the encrypted drive to be unlocked for all users on the computer. For example, by entering a password from step 7 above.
OPTION TWO
To Turn Off BitLocker for Fixed Data Drive in Windows 8
NOTE: This option will decrypt everything on a selected encrypted volume or partition (drive letter) from a fixed data drive.
1. Do step 2, 3, or 4 for how you would like to start.
2. Open the Control Panel (icons view), click/tap on BitLocker Drive Encryption icon, and go to step 5 below.
3. In File Explorer, open Computer, right click or press and hold on an encrypted data drive letter you want to decrypt, click/tap on Manage BitLocker, and go to step 5 below. (see screenshot below step 4)
4. In File Explorer, open Computer, select (highlight) an encrypted data drive letter you want to decrypt, click/tap on Manage (Drive Tools) tab, click/tap on BitLocker icon in the ribbon, click/tap Manage BitLocker, and go to step 5 below. (see screenshot below)
5. Under Fixed data drives, click/tap on an arrow to expand the drive letter you want to decrypt, and click/tap on the Turn off BitLocker link. (see screenshot below)
6. If prompted by UAC, click/tap on Yes.
7. Click/tap on Turn off BitLocker. (see screenshot below)
NOTE: This may take a long time to finish, but you will still be able to use your PC during the decryption process. Just do not turn off the PC until it has finished decrypting.
8. You will now notice the BitLocker icon in the taskbar notification area. You can click/tap on it to see the decryption progress. (see screenshot below)
9. When decryption of the drive has finally finished, click/tap on Close. (see screenshot below)
That's it,
Shawn
Related Tutorials
- How to Turn On or Off BitLocker To Go for Removable Data Drives in Windows 8
- How to Turn On or Off BitLocker for Windows 8 OS Drive with or without TPM
- How to Copy the BitLocker Startup Key for the OS Drive in Windows 8
- How to Suspend or Resume BitLocker Protection of a Drive in Windows 8
- How to Turn On or Off Auto-unlock of BitLocker Encrypted Data Drives in Windows 8
- How to Choose BitLocker Drive Encryption Method and Cipher Strength in Windows 8
- How to Unlock a Drive using BitLocker Recovery in Windows 8
- How to Back Up the BitLocker Recovery Key of a Drive in Windows 8
- How to Use BitLocker Repair Tool to Recover a Drive in Windows 7 and Windows 8
- Add "Lock Drive" to Unlocked BitLocker Drives Context Menu in Windows 7 and Windows 8
- How to Change or Reset the BitLocker Password of a Drive in Windows 8
- How to Allow or Prevent Standard Users from Changing BitLocker Password or Pin in Windows 8
- How to Check BitLocker Status of Drive in Windows 7 and Windows 8
Last edited by a moderator:
