BitLocker - Turn On or Off for OS Drive in Windows 8

How to Turn On or Off BitLocker for Windows 8 OS Drive with or without TPM


BitLocker Drive Encryption provides protection for operating system drives, fixed data drives, and removable data drives that are lost or stolen. BitLocker does this by encrypting the contents of drives and requiring users to authenticate their credentials to be able to access the information. Encrypting the entire Windows 8 operating system drive on the hard disk encrypts all user files and system files on the OS drive, including the swap (page) files and hibernation files.

This tutorial will show you how to turn on or off BitLocker to encrypt or decrypt the operating system drive in Windows 8 and 8.1 with or without a TPM.

You must be signed in as an administrator to be able to do the steps in this tutorial.


  • For computers that boot natively with UEFI firmware, BitLocker requires at least one FAT32 partition for the system drive and one NTFS partition for the operating system drive.
  • For computers with legacy BIOS firmware, BitLocker requires at least two NTFS disk partitions, one for the system drive and one for the operating system drive.
  • The system drive partition must be at least 350 MB and set as the active partition. If you do not have a system partition, then BitLocker will check for and create one automatically if able step 7 in OPTION ONE below.
  • To be able to automatically unlock fixed data drives, the drive that Windows 8 is installed on must also be encrypted by BitLocker.
  • Any files saved to an encrypted drive will automatically be encrypted as well.
  • Files remain encrypted only while they are stored on the encrypted drive. Files will be decrypted if they are copied on another drive, partition, or PC.
  • Users who use BitLocker to protect the content of their personal files can also use File History as it seamlessly supports BitLocker on both source and destination drives.
  • If you create a system image or backup of an unlocked encrypted drive, the files in the saved image or backup will be decrypted.
  • If you share files with other people, such as through a network, the files are encrypted as long as they're stored on the same encrypted drive, and they can be accessed by authorized people or people you've given permission to.
  • You will be able to unlock the encrypted Windows 8 OS drive at boot using either a password or a connected USB flash drive containing the startup key.
  • If you select to use a USB flash drive to unlock the Windows 8 OS drive with at boot, then you will need to make sure that you have your BIOS or UEFI set to allow reading from a USB drives at boot. Most are by default.
  • When using BitLocker with a TPM, it is recommended that BitLocker be turned on immediately after the computer has been restarted. If the computer has resumed from sleep prior to turning on BitLocker, the TPM may incorrectly measure the pre-boot components on the computer. In this situation, when the user subsequently attempts to unlock the computer, the TPM verification check will fail and the computer will enter BitLocker recovery mode and prompt the user to provide recovery information before unlocking the drive.

For more information, see: BitLocker Frequently Asked Questions (FAQ)

BitLocker Drive Encryption is only available in the Windows 8/8.1 Pro and Windows 8/8.1 Enterprise editions.





OPTION ONE

To Turn On BitLocker for Windows 8 OS Drive with or without a TPM



1. If you have not already, you will first need to do step 2, 3, 4, or 5 below for what you want to do.


2. Use REG File to Allow BitLocker to Encrypt OS Drive without a TPM

NOTE: This does the same thing as step 4 below, but automatically with a .reg file.

A) Click/tap on the Download button below to download the file below.

Enable_BitLocker_OS_Drive_No_TPM.reg

download

B) Save the .reg file to your desktop.

C) Double click/tap on the .reg file to merge it.

D) If prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve merging.

E) Restart the PC to apply, and go to step 6 below to continue.



3. Use REG File to Require Additional Authentication at Startup with a TPM

NOTE: This does the same thing as step 5 below, but automatically with a .reg file. For example, to require USB at startup.

A) Click/tap on the Download button below to download the file below.

Enable_Additional_Authentication_BitLocker_OS_Drive_with_TPM.reg

download

B) Save the .reg file to your desktop.

C) Double click/tap on the .reg file to merge it.

D) If prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve merging.

E) Restart the PC to apply, and go to step 6 below to continue.



4. Use Group Policy to Allow BitLocker to Encrypt OS Drive without a TPM

NOTE: This does the same thing as step 2 above.

A) Press the :winkey: + R keys to open the Run dialog, type gpedit.msc, and press Enter.

B) If prompted by UAC, click/tap on Yes.

C) In the left pane of Group Policy, click/tap on to expand Computer Configuration, Administrative Templates, Windows Components, BitLocker Drive Encryption, and Operating System Drives. (see screenshot below)

gpedit-1.jpg


D) In the right pane of Operating System Drives, double click/tap on Require additional authentification at startup to edit it. (see screenshot above)

E) Select (dot) Enabled, check the Allow Bitlocker without a compatible TPM box, and click/tap on OK. (see screenshot below)
NOTE: Not Configured is the default setting.

gpedit-2.jpg


F) Close Group Policy, and go to step 6 below to continue.



5. Use Group Policy to Require Additional Authentication at Startup with a TPM

NOTE: This does the same thing as step 3 above, but allows you to have more options.

A) Press the :winkey: + R keys to open the Run dialog, type gpedit.msc, and press Enter.

B) If prompted by UAC, click/tap on Yes.

C) In the left pane of Group Policy, click/tap on to expand Computer Configuration, Administrative Templates, Windows Components, BitLocker Drive Encryption, and Operating System Drives. (see screenshot below step 4C)

D) In the right pane of Operating System Drives, double click/tap on Require additional authentification at startup to edit it. (see screenshot above)

E) Select (dot) Enabled, uncheck the Allow Bitlocker without a compatible TPM box, and click/tap on OK. (see screenshot below)
NOTE: Not Configured is the default setting.

TPM_Group_Policy.png


F) Close Group Policy, and go to step 6 below to continue.


6. If you have not already, choose to use either an AES 128-bit or 256-bit encryption method.
NOTE: Windows 8 uses AES 128-bit encryption by default.


7. Do step 8, 9, or 10 for how you would like to start to turn on BitLocker for the OS drive.


8. Open the Control Panel (icons view), click/tap on BitLocker Drive Encryption icon. Under Operating system drive, click/tap on an arrow to expand the Windows 8 drive you want to encrypt, click/tap on the Turn on BitLocker link, and go to step 11 below. (see screenshot below)

Turn_On_Bitlocker_OS-1.jpg


9. In File Explorer, open Computer/This PC, right click or press and hold on the encrypted Windows 8 drive you want to encrypt, click/tap on Turn on BitLocker, and go to step 11 below. (see screenshot below step 10)

10. In File Explorer, open Computer/This PC, select (highlight) the encrypted Windows 8 drive you want to encrypt, click/tap on Manage (Drive Tools) tab, click/tap on BitLocker icon in the ribbon, click/tap Turn on BitLocker, and go to step 11 below. (see screenshot below)

Turn_On_Bitlocker_OS-2.jpg


11. If you did not have the required 350 MB system drive partition, then BitLocker will now create one if able. Click/tap on Next, and Restart now when prompted. (see screenshots below)
NOTE: You will not get this step if you do already ave at least a 350 MB system drive partition.

Turn_On_Bitlocker_OS-3A.jpg

Turn_On_Bitlocker_OS-3B.jpg


12. Do step 13, 14, or 15 below for what you would like to use to unlock the Windows 8 drive with at startup. (see screenshots below)

NOTE: This will not be available with a TPM unless you did step 3 or 5 above.

Turn_On_Bitlocker_OS-4.jpg

TPM.png



13. To "Insert a USB flash drive" at Boot to Unlock the OS Drive

NOTE: This will not be available with a TPM unless you did step 3 or 5 above.

A) Connect a USB flash drive, and click/tap on the Insert a USB flash drive option. (see screenshot below step 12)

B) Select the USB flash drive you want to save the startup key on, click/tap on Save, and go to step 16 below. (see screenshot below)

Turn_On_Bitlocker_OS-5.jpg




14. To "Enter a password" at Boot to Unlock the OS Drive

NOTE: This will not be available with a TPM.

A) Click/tap on the Enter a password option. (see screenshot below step 12)

B) Enter and reenter a password at least 8 characters long, click/tap on Next, and go to step 16 below. (see screenshot below)

Turn_On_Bitlocker_OS-6.jpg




15. To Let BitLocker Automatically Unlock OS Drive

NOTE: This will only be available with a TPM.

A) Click/tap on the Let BitLocker automaticalyl unlock my drive option, and go to step 16 below. (see screenshot below step 12)



16. Select how you want to back up your BitLocker recovery key, and click/tap on Next when finished. (see screenshot below)

Note   Note
The Save to USB flash drive option will not be available if you are encrypting with a TPM. If you like, you could use the Save to a file option, and select a USB flash drive to save the file to though.

If you forget the password (step 14) or lost the USB flash drive (step 13), then you can still use this recovery key (a string of 48 random numbers) to get back into the OS drive at boot.

It's essential that you store a copy of your recovery in a safe place. If you lose it, you might permanently lose access to your files on the encrypted OS drive.


Tip   Tip
The Save to your Microsoft account option is only available on non-domain-joined PCs.

If you saved the BitLocker recovery key to your Microsoft account, you will be able to log in to your Microsoft account online at the Microsoft's site below from any PC to view all of your saved recovery keys at anytime.

http://windows.microsoft.com/recoverykey





Turn_On_Bitlocker_OS-7.jpg


17. Select (dot) to encrypt entire drive, and click/tap on Next. (see screenshot below)

Turn_On_Bitlocker_OS-8.jpg


18. Check the Run BitLocker system check box, and click/tap on Continue. (see screenshot below)
NOTE: Running the system check is one more recommended way to make sure that BitLocker works smoothly for you, but it can take longer, and it requires your PC to restart. If you decide to run the system check, make sure you've saved your work before restarting. When your PC restarts, it will prompt you to unlock your operating system drive with the method you just chose in step 12 above.

Turn_On_Bitlocker_OS-9.jpg


19. You will now notice the BitLocker icon in the taskbar notification area. Click/tap on it, and on Restart now. (see screenshots below)

Turn_On_Bitlocker_OS-10.jpg

Note   Note
If you selected to enter password in step 14 above, then you will be prompted to enter the password at boot when the computer restarts.

password.jpg







20. If the BitLocker system check failed from step 10 above, then you will see this below. Click/tap on Close. You are now finished since BitLocker was unable to encrypt the Windows 8 OS drive.

Turn_On_Bitlocker_OS-11B.jpg


21. If the BitLocker system check was successful from step 18 above, then after a short moment you will notice the BitLocker icon in the taskbar notification area. You can click/tap on it to see the encryption progress. (see screenshot below)
NOTE: This may take a long time to finish, but you will still be able to use your PC during the encryption process. Just do not turn off the PC until it has finished encrypting.

Turn_On_Bitlocker_OS-11A.jpg


22. When encryption of the Windows 8 OS drive has finally finished, click/tap on Close. (see screenshot below)

Turn_On_Bitlocker_OS-12.jpg


23. Whenever you start the Windows 8 PC, you may be required to either enter a password or connect the USB flash drive depending on what you selected in step 12 above.

password.jpg


Unlocked.png









OPTION TWO

To Turn Off BitLocker for Windows 8 OS Drive



1. If you have not already, you will first need to turn off auto-unlock for any encrypted fixed data drives. If you do not, then all fixed data drives that have auto-unlock turned on will also be decrypted at step 8 below.
NOTE: This does not apply to removable data drives.

2. Do step 3, 4, or 5 for how you would like to start.

3. Open the Control Panel (icons view), click/tap on BitLocker Drive Encryption icon, and go to step 6 below.

4. In File Explorer, open Computer/This PC, right click or press and hold on the encrypted Windows 8 drive you want to decrypt, click/tap on Manage BitLocker, and go to step 6 below. (see screenshot below step 5)

5. In File Explorer, open Computer/This PC, select (highlight) the encrypted Windows 8 drive you want to decrypt, click/tap on Manage (Drive Tools) tab, click/tap on BitLocker icon in the ribbon, click/tap Manage BitLocker, and go to step 6 below. (see screenshot below)

Turn_Off_Bitlocker_OS-1.jpg

6. Under Operating system drive, click/tap on the arrow to expand the Windows 8 OS drive you want to decrypt, and click/tap on the Turn off BitLocker link. (see screenshot below)

Turn_Off_Bitlocker_OS-2.jpg

7. If prompted by UAC, click/tap on Yes.

8. Click/tap on Turn off BitLocker or Decrypt all drives depending in if you turned off auto-unlock for all fixed data drives in step 1 above. (see screenshots below)
NOTE: This may take a long time to finish, but you will still be able to use your PC during the decryption process. Just do not turn off the PC until it has finished decrypting.

Turn_Off_Bitlocker_OS-3.jpg

9. You will now notice the BitLocker icon in the taskbar notification area. You can click/tap on it to see the decryption progress. (see screenshot below)

Turn_Off_Bitlocker_OS-4.jpg

10. When decryption of the drive has finally finished, click/tap on Close. (see screenshot below)

Turn_Off_Bitlocker_OS-5.jpg


11. If you like, you could also do step 12 or 13 below to set the default setting to require BitLocker to only encrypt an OS drive with a TPM (step 2 and 4 in OPTION ONE) and not require additional authentification for a TPM (step 3 and 5 in OPTION ONE) if you like.

12. To Use a Reg File to Undo Step 2, 3, 4, or 5 in OPTION ONE


A) Click/tap on the Download button below to download the file below.

Disable_BitLocker_OS_Drive_No_TPM.reg


download


B) Save the .reg file to your desktop.

C) Double click/tap on the .reg file to merge it.

D) If prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve merging.

E) Restart the PC to apply.

13. Use Group Policy to Undo Step 2, 3, 4, or 5 in OPTION ONE


A) Press the :winkey: + R keys to open the Run dialog, type gpedit.msc, and press Enter.

B) If prompted by UAC, click/tap on Yes.

C) In the left pane of Group Policy, click/tap on to expand Computer Configuration, Administrative Templates, Windows Components, BitLocker Drive Encryption, and Operating System Drives. (see screenshot below step 4C in Option One)

D) In the right pane of Operating System Drives, double click/tap on Require additional authentification at startup to edit it. (see screenshot below step 4C in Option One)

E) Select (dot) Not Configured, and click/tap on OK. (see screenshot below step 4E in Option One)
NOTE: This is the default setting.

F) Close Group Policy.


That's it,
Shawn


 

Attachments

  • Turn_Off_auto-unlock.jpg
    Turn_Off_auto-unlock.jpg
    47 KB · Views: 358
  • Enable_BitLocker_OS_Drive_No_TPM.reg
    890 bytes · Views: 28,885
  • Disable_BitLocker_OS_Drive_No_TPM.reg
    734 bytes · Views: 2,487
  • Enable_Additional_Authentication_BitLocker_OS_Drive_with_TPM.reg
    890 bytes · Views: 10,294
  • BitLocker.png
    BitLocker.png
    18 KB · Views: 363
Last edited by a moderator:

DavidY

Active Member
VIP Member
Pro User
Messages
955
I think I understand it now.

I believe Pervasive Device Encryption will bring disk encryption to all editions of Windows, including 8.1, but you need to have certain hardware features that Microsoft calls "InstantGo".

These will presumably appear on computers which are manufactured with Windows 8.1, but I'm guessing won't be so common on many computers around today which are being upgraded from earlier versions of Windows.

So my old laptops won't run it, regardless of which edition I'm running.

From here:
Windows 8.1 FAQ - Apps, Security, Virtualization, UEFI | TechNet
What's new in device encryption?

Device Encryption, which is based on BitLocker technology and is currently included in Windows RT and Windows Phone 8, will be added to all editions of Windows 8.1. If the device is certified for InstantGo, this capability is available and automatically implemented on the device.
 

My Computer

System One

  • OS
    Windows 8.1, 10

Brink

Administrator
Administrator
mvp
Messages
25,080
Hello David,

That's correct. While all Windows 8.1 editions will support this, only PCs that meet certain hardware requirements will actually have Device Encryption.

Connected Standby or InstantGo, is where Windows can be turned on and off instantly like a smartphone. Pretty neat stuff.
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

Christianus

New Member
Messages
7
Location
Gdańsk
Upgrade of Windows 8 and BitLocker

Hello Brink!

Is upgrade of Windows 8 (64-bit) (English-US) to Windows 8.1 (64-bit) (English-US) possible when system partition is encrypted with BitLocker?

Thank you for your response in advance.
 

My Computer

System One

  • OS
    Windows 8.1 Pro (64-bit)
    Computer type
    Laptop
    System Manufacturer/Model
    Asus N56VZ
    CPU
    Intel Core i7-3610QM
    Motherboard
    Intel HM76 (Panther Point)
    Memory
    8192 MB, 2x 4GB DDR3
    Graphics Card(s)
    NVIDIA GeForce GT 650M - 2048 MB, Core: 835 MHz, Memory: 900 MHz, DDR3
    Sound Card
    RealTek ALC663 @ Intel HM76 (Panther Point)
    Monitor(s) Displays
    15.6 inch 16:9, Samsung 156HT01-201, glossy: no
    Screen Resolution
    1920x1080 pixel
    Hard Drives
    Seagate Momentus SpinPoint M8 ST1000LM024, 1000 GB 5400 rpm;
    Seagate Expansion Desktop Drive, 2TB USB 3.0 7200 rpm;
    Toshiba StorE alu2, 500 GB 5400 rpm
    Internet Speed
    Atheros L1 Gigabit Ethernet 10/100/1000Base-T (10/100/1000MBit), Atheros AR9485WB-EG Wireless Net
    Antivirus
    avast! Free Antivirus

Brink

Administrator
Administrator
mvp
Messages
25,080
Hello Chistianus, and welcome to Eight Forums.

Sorry, but no. You would need to decrypt your OS drive first. Afterwards, you could decrypt it again if you like. :)
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

TonyB

New Member
Power User
Messages
529
HI Brink but i don't see any details on my windows 8 pro of this Pervasive Device Encryption? how would i tell if its on??
 

My Computer

System One

  • OS
    Windows 8.1 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Myself
    CPU
    Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
    Motherboard
    MSI Z77A-G45
    Memory
    8 gigs
    Graphics Card(s)
    PNY GeForce GTX 660 Ti
    Sound Card
    onboard
    Monitor(s) Displays
    Samsung Sync Master s27B550
    Screen Resolution
    1080p
    Hard Drives
    1 TB internal driver and one 1TB external drive.
    PSU
    Antec NeoECO 620 watt
    Case
    custom case
    Cooling
    Fans
    Keyboard
    steelseries apex
    Mouse
    stellseris sensel
    Internet Speed
    Unknowen
    Browser
    Google chrome
    Antivirus
    Norton 360 from comcast

Brink

Administrator
Administrator
mvp
Messages
25,080
HI Brink but i don't see any details on my windows 8 pro of this Pervasive Device Encryption? how would i tell if its on??

Hey Tony,

It would have to be a certified Windows 8.1 connected standby (instant on/off) device to have the Pervasive Device Encryption feature.
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

TonyB

New Member
Power User
Messages
529
How do i tell if i have this ?? mine is Alienware x51 first revision?
 

My Computer

System One

  • OS
    Windows 8.1 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Myself
    CPU
    Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
    Motherboard
    MSI Z77A-G45
    Memory
    8 gigs
    Graphics Card(s)
    PNY GeForce GTX 660 Ti
    Sound Card
    onboard
    Monitor(s) Displays
    Samsung Sync Master s27B550
    Screen Resolution
    1080p
    Hard Drives
    1 TB internal driver and one 1TB external drive.
    PSU
    Antec NeoECO 620 watt
    Case
    custom case
    Cooling
    Fans
    Keyboard
    steelseries apex
    Mouse
    stellseris sensel
    Internet Speed
    Unknowen
    Browser
    Google chrome
    Antivirus
    Norton 360 from comcast

Brink

Administrator
Administrator
mvp
Messages
25,080
There's the rub. It's a new feature that I haven't been able to see in person yet. The only way that I would think of is if the PC was able to be instantly turned on or off with no load time like a smartphone, and that it should be listed as a feature of the PC if it was able to do so.

I would have to say that your PC doesn't support it. This would be more of a feature of a portable PC instead.
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

TonyB

New Member
Power User
Messages
529
yeah i would have to agree as mine boots fast but not instant on lol that would be nice :)
 

My Computer

System One

  • OS
    Windows 8.1 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Myself
    CPU
    Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
    Motherboard
    MSI Z77A-G45
    Memory
    8 gigs
    Graphics Card(s)
    PNY GeForce GTX 660 Ti
    Sound Card
    onboard
    Monitor(s) Displays
    Samsung Sync Master s27B550
    Screen Resolution
    1080p
    Hard Drives
    1 TB internal driver and one 1TB external drive.
    PSU
    Antec NeoECO 620 watt
    Case
    custom case
    Cooling
    Fans
    Keyboard
    steelseries apex
    Mouse
    stellseris sensel
    Internet Speed
    Unknowen
    Browser
    Google chrome
    Antivirus
    Norton 360 from comcast

TonyB

New Member
Power User
Messages
529
So should i encrypt my drive i have yet to do so but i was curious if i should do this, and what is best way to do they key USB or just type a password all the time?
 

My Computer

System One

  • OS
    Windows 8.1 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Myself
    CPU
    Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
    Motherboard
    MSI Z77A-G45
    Memory
    8 gigs
    Graphics Card(s)
    PNY GeForce GTX 660 Ti
    Sound Card
    onboard
    Monitor(s) Displays
    Samsung Sync Master s27B550
    Screen Resolution
    1080p
    Hard Drives
    1 TB internal driver and one 1TB external drive.
    PSU
    Antec NeoECO 620 watt
    Case
    custom case
    Cooling
    Fans
    Keyboard
    steelseries apex
    Mouse
    stellseris sensel
    Internet Speed
    Unknowen
    Browser
    Google chrome
    Antivirus
    Norton 360 from comcast

Brink

Administrator
Administrator
mvp
Messages
25,080
So should i encrypt my drive i have yet to do so but i was curious if i should do this, and what is best way to do they key USB or just type a password all the time?

It's up to you if you feel that you need the extra access security it provides. I like using a USB flash drive, but the password option is good as well.

If you decide to do so, be sure that you back up the BitLocker recovery key and startup key. If you get locked out of the drive by BitLocker and do not have these keys, you'll be completely out of luck on trying to access the drive again.

http://www.eightforums.com/tutorials/21818-bitlocker-recovery-key-back-up-windows-8-a.html
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

devios

New Member
Messages
3
bitlocker on yoga 2 pro

i want to encrypt my yoga 2 pro [y2p] system running 8.1.

i tried to boot a kali linux thumbdrive on it to see if the y2p could boot from it. i discovered it would not boot from the thumbdrive by default; I had to make an /EFI/Boot folder on the thumbdrive and add some files to it (https://forums.kali.org/showthread.php?271-How-to-EFI-install-Kali-Linux) for the Y2P system to be able to see and try to boot from the USB thumbdrive.

this has me worried about trying to use bitlocker on the Y2P; worried it wont be able to use the thumbdrive to unlock the encrypted drive because bitlocker doesn't support EFI systems? (Windows BitLocker Drive Encryption Frequently Asked Questions).

i'm terrified of trying to enable bitlocker on this thing.

btw - im not insistent on using a usb key for bitlocker; i'd actually prefer to use a passphrase.

doesn't seem like Y2P has a TPM chip (https://forums.lenovo.com/t5/Idea-Windows-based-Tablets-and/Yoga-2-TPM-chip/td-p/1298457).

another related link: ***Yoga 2 Pro Owners Thread*** - Page 75

and another: bitlocker - Lenovo Community

i feel like this is way too difficult or i am missing something simple here.

what should i do? any advice?

thanks in advance all!
 

My Computer

System One

  • OS
    windows and linux

Brink

Administrator
Administrator
mvp
Messages
25,080
Hello Devios, and welcome to Eight Forums.

The Microsoft article you referenced for BitLocker was for Vista instead. The BitLocker in Windows 8 and 8.1 will work just fine with UEFI, so no worries there.

You should have no issue using either a passphrase or USB, but I would recommend to keep a backup copy of the BitLocker startup and recovery key in a safe location should something happen to the USB or you forget the passphrase, and easier if you should ever need to recover the drive.

It does seem difficult, but it's really not once you give it a try and get used to it. Once you do, it almost no different then signing in to Windows, but just more securely.

Encrypting with BitLocker will either be successful or fail, but you shouldn't have any issues while doing the steps exactly in the tutorial. If it fails, then no harm no foul since nothing would have changed.

Please feel free to ask any questions you may have. :)
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

devios

New Member
Messages
3
thanks brink - i couldn't seem to find any link where microsoft (or anyone else) states bitlocker works fine/easily/completely on 8.1 UEFI systems without a TPM chip. do you have any such link(s)?

either way, i'll give it a shot when my new usb thumbdrives arrive and let forum know how it goes.
 

My Computer

System One

  • OS
    windows and linux

Brink

Administrator
Administrator
mvp
Messages
25,080

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

devios

New Member
Messages
3
That documentation example isn't super clear. Where do they find the monkeys that write and edit the MS documentation?!

For the record, happy to report that after making the policy change to allow bitlocker on a machine without a TPM chip, I was able to encrypt my C:\ (system) drive using BitLocker, and was allowed to chose to use a passphrase or USB key to unlock on boot. I chose password, and it's working great on my Y2P.

Thank you again for the help and information!
 

My Computer

System One

  • OS
    windows and linux

Brink

Administrator
Administrator
mvp
Messages
25,080
You're most welcome Devios. I'm happy to hear that all went well.

Yeah, some of those documents can be a bit cryptic at times. Pun intended. :p
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

Stilcho

New Member
Messages
4
Hello to everyone,

I want to know ... Will this work if I have installed TPM chip in the laptop but if I want to encrypt the OS drive without using the TPM chip ? ( to check "Allow Bitlocker without a compatible TPM" ) The laptop is with Windows 8.1 and I don't want to manage ( administrate ) the TPM chip :)
 

My Computer

System One

  • OS
    Windows 7 Pro
    Computer type
    Laptop

Brink

Administrator
Administrator
mvp
Messages
25,080
Hello Stilcho,

I don't have a TPM to test with, but you could give it a try to see if you may be able to select not to use the TPM.

If not, then you may need to either disable or remove the TPM chip if able first to be able to use OPTION ONE to use BitLocker without the TPM.
 
Last edited:

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone

Brink

Administrator
Administrator
mvp
Messages
25,080
Tutorial has been updated to include options to use BitLocker on an OS drive with a TPM. :)
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 970 EVO Plus M.2,
    250GB Samsung 960 EVO M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Arris SB8200 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Lumia 1520 phone
Top