Windows 8 and 8.1 Forums


BitLocker - Turn On for Fixed Data Drives in Windows 8

  1. #1
    BitLocker - Turn On for Fixed Data Drives in Windows 8

    BitLocker - Turn On for Fixed Data Drives in Windows 8
    How to Turn On or Off BitLocker for Fixed Data Drives in Windows 8
    Published by Brink is offline
    26 Feb 2013
    Default BitLocker - Turn On for Fixed Data Drives in Windows 8

    Published by


    Brink's Avatar
    Administrator

    Join Date: Jul 2009
    Posts: 22,576

    How to Turn On or Off BitLocker for Fixed Data Drives in Windows 8

    information   Information
    BitLocker Drive Encryption provides protection for operating system drives, fixed data drives, and removable data drives that are lost or stolen. BitLocker does this by encrypting the contents of drives and requiring users to authenticate their credentials to be able to access the information.

    This tutorial will show you how to turn on or off BitLocker to encrypt or decrypt fixed data drives (ex: internal hard drive) in Windows 8 and 8.1.

    You must be signed in as an administrator to be able to do the steps in this tutorial.

    Note   Note

    • This tutorial does not apply to an operating system drive.
    • For a fixed data drive to be BitLocker-protected, it must be formatted by using the exFAT, FAT16, FAT32, or NTFS file system.
    • The drive, volume, or partition must be least 64 MB in size.
    • Any files saved to an encrypted drive will automatically be encrypted as well.
    • Files remain encrypted only while they are stored on the encrypted drive. Files will be decrypted if they are copied on another drive, partition, or PC.
    • Users who use BitLocker to protect the content of their personal files can also use File History as it seamlessly supports BitLocker on both source and destination drives.
    • If you create a system image or backup of an unlocked encrypted drive, the files in the saved image or backup will be decrypted.
    • If you share files with other people, such as through a network, the files are encrypted as long as they're stored on the same encrypted drive, and they can be accessed by authorized people or people you've given permission to.
    • You can choose how you want to unlock an encrypted data drive: with a password or smart card. You can also set the drive to automatically unlock when you sign to the PC, if you prefer.
    • To be able to automatically unlock fixed data drives, the OS drive that Windows 8 is installed on must also be encrypted by BitLocker.


    For more information, see: BitLocker Frequently Asked Questions (FAQ)


    warning   Warning
    BitLocker Drive Encryption is only available in the Windows 8 Pro and Windows 8 Enterprise editions.





    BitLocker - Turn On for Fixed Data Drives in Windows 8 OPTION ONE BitLocker - Turn On for Fixed Data Drives in Windows 8
    To Turn On BitLocker for Fixed Data Drive in Windows 8

    NOTE: This option will encrypt everything on a selected unencrypted volume or partition (drive letter) from a fixed data drive.

    1. If you have not already, choose to use either an AES 128-bit or 256-bit encryption method.
    NOTE: Windows 8 uses AES 128-bit encryption by default.

    2. Do step 3, 4, or 5 for how you would like to start.

    3. Open the Control Panel (icons view), click/tap on BitLocker Drive Encryption icon. Under Fixed data drives, click/tap on an arrow to expand the drive letter you want to encrypt, click/tap on the Turn on BitLocker link, and go to step 6 below. (see screenshot below)

    Click image for larger version

    4. In File Explorer, open Computer, right click or press and hold on an unencrypted data drive letter you want to encrypt, click/tap on Turn on BitLocker, and go to step 6 below. (see screenshot below step 5)

    5. In File Explorer, open Computer, select (highlight) an unencrypted data drive letter you want to encrypt, click/tap on Manage (Drive Tools) tab, click/tap on BitLocker icon in the ribbon, click/tap Turn on BitLocker, and go to step 6 below. (see screenshot below)

    Click image for larger version

    6. If prompted by UAC, click/tap on Yes.

    7. Check the box of option(s) you want to use to unlock the drive with, and click/tap on Next when ready. (see screenshot below)

    Note   Note
    Password = When users attempt to open a drive, they are prompted to enter the password before the drive will be unlocked. Passwords will need to be at least 8 characters long to meet minimum length requirements. Be sure to write down this password, and keep it somewhere safe in case you forget the password.

    Smart card = When users attempt to open a drive, they are prompted to insert their smart card and enter the smart card PIN number before the drive will be unlocked. When encrypting a drive by using a smart card, a certificate-based protector is created on the drive. This protector contains some unencrypted information that is required to unlock the drive. The public key and thumbprint of the certificate that was used to encrypt the drive is stored unencrypted in the protector's metadata on the drive. This information could be used to identify the certification authority (CA) that issued the certificate.

    Automatic unlock
    = Fixed data drives can be set to automatically unlock on a computer where the operating system drive is also encrypted. Removable data drives can be set to automatically unlock on a computer running Windows 8 after the password or smart card is initially used to unlock the drive.


    Name:  Turn_On_BitLocker-3.jpg
Views: 15638
Size:  62.3 KB

    8. Select how you want to back up your BitLocker recovery key, and click/tap on Next when finished. (see screenshot below)

    Note   Note
    If you forget the password (step 7) for a drive you've encrypted with BitLocker Drive Encryption, or if something happens to your PC that prevents it from accessing the encrypted drive, you can still use a recovery key (a string of 48 random numbers) to get back into the drive.

    It's essential that you store a copy of your recovery in a safe place. If you lose it, you might permanently lose access to your files on the encrypted drive.
    Tip   Tip
    The Save to your Microsoft account option is only available on non-domain-joined PCs.

    If you saved the BitLocker recovery key to your Microsoft account, you will be able to log in to your Microsoft account online at the Microsoft's site below from any PC to view all of your saved recovery keys at anytime.

    http://windows.microsoft.com/recoverykey



    Name:  Turn_On_BitLocker-4.jpg
Views: 15383
Size:  55.0 KB

    9. Select (dot) to encrypt entire drive, and click/tap on Next. (see screenshot below)

    Name:  Turn_On_BitLocker-5.jpg
Views: 15379
Size:  78.3 KB

    10. Click/tap on Start encrypting. (see screenshot below)
    NOTE: This may take a long time to finish, but you will still be able to use your PC during the encryption process. Just do not turn off the PC until it has finished encrypting.

    Name:  Turn_On_BitLocker-6.jpg
Views: 15512
Size:  44.2 KB

    11. You will now notice the BitLocker icon in the taskbar notification area. You can click/tap on it to see the encryption progress. (see screenshot below)

    Name:  Turn_On_BitLocker-7.jpg
Views: 15654
Size:  46.8 KB

    12. When encryption of the drive has finally finished, click/tap on Close. (see screenshot below)

    Name:  Turn_On_BitLocker-8.jpg
Views: 15205
Size:  18.5 KB

    13. Unless the encrypted drive is set to auto-unlock (step 7 above), whenever the computer is restarted, any local user (standard or administrator) will need to unlock the encrypted drive to be unlocked for all users on the computer. For example, by entering a password from step 7 above.

    Name:  Unlock.jpg
Views: 15280
Size:  22.1 KB

    Name:  Locked_Drive.png
Views: 22742
Size:  55.1 KB Name:  Unlocked_Drive.png
Views: 15149
Size:  47.4 KB






    BitLocker - Turn On for Fixed Data Drives in Windows 8 OPTION TWO BitLocker - Turn On for Fixed Data Drives in Windows 8
    To Turn Off BitLocker for Fixed Data Drive in Windows 8

    NOTE: This option will decrypt everything on a selected encrypted volume or partition (drive letter) from a fixed data drive.

    1. Do step 2, 3, or 4 for how you would like to start.

    2. Open the Control Panel (icons view), click/tap on BitLocker Drive Encryption icon, and go to step 5 below.

    3. In File Explorer, open Computer, right click or press and hold on an encrypted data drive letter you want to decrypt, click/tap on Manage BitLocker, and go to step 5 below. (see screenshot below step 4)

    4. In File Explorer, open Computer, select (highlight) an encrypted data drive letter you want to decrypt, click/tap on Manage (Drive Tools) tab, click/tap on BitLocker icon in the ribbon, click/tap Manage BitLocker, and go to step 5 below. (see screenshot below)

    Click image for larger version

    5. Under Fixed data drives, click/tap on an arrow to expand the drive letter you want to decrypt, and click/tap on the Turn off BitLocker link. (see screenshot below)

    Click image for larger version

    6. If prompted by UAC, click/tap on Yes.

    7. Click/tap on Turn off BitLocker. (see screenshot below)
    NOTE: This may take a long time to finish, but you will still be able to use your PC during the decryption process. Just do not turn off the PC until it has finished decrypting.

    Name:  Turn_Off_Bitlocker-3.jpg
Views: 15310
Size:  25.9 KB

    8. You will now notice the BitLocker icon in the taskbar notification area. You can click/tap on it to see the decryption progress. (see screenshot below)

    Name:  Turn_Off_Bitlocker-4.jpg
Views: 15330
Size:  44.7 KB

    9. When decryption of the drive has finally finished, click/tap on Close. (see screenshot below)

    Name:  Turn_Off_Bitlocker-5.jpg
Views: 15138
Size:  17.6 KB



    That's it,
    Shawn


    Related Tutorials



  2. #1


    Posts : 1
    Windows 8.1


    Hi,

    I have a question. what is the difference between unlocking a drive and decrypting that?
    When we unlock a drive, do we unscramble it?
    Thank you.

      My System SpecsSystem Spec

  3. #2


    Posts : 22,576
    64-bit Windows 10


    Hello Amir, and welcome to Eight Forums.

    When you unlock or auto-unlock a drive, it's just to be able to access the encrypted drive. It doesn't decrypt the drive.

    You could suspend/resume BitLocker to temporary toggle encryption on/off as needed.

    Only if you turn off Bitlocker will it completely decrypt the drive.

    Hope this helps,
    Shawn
      My System SpecsSystem Spec

  4. #3


    Posts : 3
    Pentium(R)


    Click image for larger version sir I am facing this problem, but I don't know how can I solve it. According to your tutorial.Click image for larger versionkindly help me what is problem with my laptop.
      My System SpecsSystem Spec

  5. #4


    Posts : 22,576
    64-bit Windows 10


    Hello Kaleem, and welcome to Eight Forums.

    Please go ahead and post a screenshot showing the full layout of your Disk Management (diskmgmt.msc) while the drive is connected to see what the issue may be.

    Screenshots and Files - Upload and Post in Eight Forums
      My System SpecsSystem Spec

  6. #5


    Posts : 3
    Pentium(R)


    Click image for larger version sir, this is the full screenshot. thanks for your attention.
      My System SpecsSystem Spec

  7. #6


    Posts : 22,576
    64-bit Windows 10


    What type of removable drive is this?

    Directly right click on the left smaller Disk 1 box on the bottom half of the screenshot, and see if you have an Initialize or Online option. If you do, click on it to see if that restores your drive.
      My System SpecsSystem Spec

  8. #7


    Posts : 3
    Pentium(R)


    Click image for larger versionClick image for larger version removable disk means USB
      My System SpecsSystem Spec

  9. #8


    Posts : 22,576
    64-bit Windows 10


    If this is a media card reader, then it'll need to have a media card inserted in it first before it will be accessible.

    You would need to right click on the area boxed in red instead.

    Click image for larger version
      My System SpecsSystem Spec

  10. #9


    Germany/Florida
    Posts : 4,514
    Vista and Win7


    Something is strange. I have decrypted the C partition but there seems to still be an encryption bit somewhere. E.g. the AOMEI OneKey imaging program can still not image the partition because it is shown to them as encrypted - actually they say 'dynamic' but it is not dynamic. After correspondence with AOMEI it appears that they cannot make the difference between encrypted and dynamic.
      My System SpecsSystem Spec

Page 1 of 2 12 LastLast
BitLocker - Turn On for Fixed Data Drives in Windows 8
Related Threads
How to Turn On or Off BitLocker for Windows 8 OS Drive with or without TPM BitLocker Drive Encryption provides protection for operating system drives, fixed data drives, and removable data drives that are lost or stolen. BitLocker does this by encrypting the contents of drives and requiring...
How to Turn On or Off Auto-unlock of BitLocker Encrypted Data Drives in Windows 8 Once a data drive has been protected with BitLocker, access to the drive is authenticated before the contents are displayed. A fixed data drive that has been encrypted by BitLocker will either automatically...
I am posting here because I have seen the most relevant information about bitlocker. I have no idea why but two different fixed SSD drives are being listed as to go under bitlocker. I have no idea why or what to do about it. One is a Samsung 840 EVO, the other a Crucial Mx100. A third SSD,...
Bitlocker Detect Data Drive in System Security
Hello, I've recently encrypted my main drive, and all is well. However, I would like to be able to encrypt one of my data drives as well and bitlocker isn't even detecting the drive's existence under "Fixed Drives" I'm on windows 8.1 machine, the encrypted main drive is a SSD drive, and the data...
I'm currently testing Windows 8 To Go in a enterprise environment. I have some of the officially certified 64GB Kingston Workspace drives, Kingston DataTraveler Workspace 64 GB USB 3.0 Flash Drive - 1 Pack - Newegg.com, and they work fine but at $129 per USB they are too expensive to purchase that...
Hi - I notice there are some good tutorials about Bitlocker on here and I wondered if anyone could help me. I am trying to install a Seagate Constellation.2 self-encrypting drive with Windows 8 for use with Bitlocker. Several articles that I've read imply that Bitlocker will recognise the SED....
How to Turn On or Off BitLocker To Go for Removable Data Drives in Windows 8 BitLocker Drive Encryption provides protection for operating system drives, fixed data drives, and removable data drives that are lost or stolen. BitLocker does this by encrypting the contents of drives and...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook