#Bitlocker without tpm windows 10 how to#
#Bitlocker without tpm windows 10 windows 10#
#Bitlocker without tpm windows 10 software#
#Bitlocker without tpm windows 10 code#
#Bitlocker without tpm windows 10 password#

Wait during the restart, when it is done, open a session. This option is optional, but I recommend that you check the Run Bitlocker System Check 1 box and click Continue 2.Д¬lick on Restart now 1, encryption will start after restarting the computer. The file must be placed in a folder, it is not possible to save it to the root of a drive.Д¬hoose whether you want to encrypt the entire disk or just the used space 1 and click Next 2.Д¬hoose Bitlocker encryption mode 1 and click Next 2.

Save 1 the file containing the recovery key. Once the wizard has started, the first step is to save the recovery key, click on Save in a file 1. Right click on drive 1 and click on Activate Bitlocker 2. Activate BitlockerД¬onnect a USB key before moving on, or in the case of a virtual machine add a virtual disk Check the presence of a TPM moduleДЇrom Device Manager, check for the presence of Trusted Platform Module 2.0 1. Open computer settings and go to Security 1.Д¬heck the box Enable Trusted Platform Module 1 and click Apply 2 and OK 3. The addition of the component must be done with the computer off. Add a TPM chip to a Hyper-V virtual machine (optional) You must also provide a USB key or another disk for storing the file containing the decryption key. Often granular restoration is not available.ДЇor the tutorial, I used a virtual machine under Hyper-V, on a physical computer, I let you check in the technical specifications of this one if it is equipped with a TPM chip.

#Bitlocker without tpm windows 10 software#

It is possible on generation 2 computers with Hyper-V, to add a virtual TPM chip to encrypt hard drives to increase the security of sensitive data.Д«efore you enable Bitlocker on a production server that is backed up, verify that your backup software supports Bitkocker. , you will need to use the decryption key to access the data.

#Bitlocker without tpm windows 10 password#

This solution is especially useful in the event of loss or theft of your computer to protect the data on it provided you have a strong password so that it is not broken, if the disc is installed in another computer.

#Bitlocker without tpm windows 10 code#

In the tutorial configuration, no unlock code is requested at startup.Д«efore going into details, IвЂ™ll explain why you should enable encryption with a TPM chip. It is also possible to activate the unlocking (decryption) using a code when Windows starts up. The TPM chip is a hardware chip which will store the decryption key and which is specific to the computer.

#Bitlocker without tpm windows 10 how to#

In this tutorial, I will tell you how to activate Bitlocker with a TPM chip.Д«itlocker is a feature of Windows that allows you to enable encryption of a hard drive in order to secure data.

Add a TPM chip to a Hyper-V virtual machine (optional).

You may now start the VM and enable Bitlocker from within the OS.

(obviously, replace with the name of your Virtual Machine, as shown in HyperV Manager. Set-VMKeyProtector -VMName -KeyProtector $kp.RawData You may now apply the HgsKeyProtector to the VM:

You have now created a valid key protector.

$kp = New-HgsKeyProtector -Owner $owner -AllowUntrustedRoot $owner = Get-HgsGuardian UntrustedGuardian

Copy-paste the following cmdlets to configure a valid key protector.

Type the following cmdlet to import the Hyper-V module:.

In Settings for, go to Security and enable Enable Trusted Platform Module.

From the HyperV Manager, open the settings of the VM.

Turn off the VM, as the TPM canвЂ™t be enabled when the VM is running.

#Bitlocker without tpm windows 10 windows 10#

To enable a TPM chip in a Hyper-V Windows 10 virtual machine, do the following: You can now enable Bitlocker on your OS-drive.

select Allow Bitlocker without a compatible TPM (requires a password or a startup key on a USB flash drive)Д¬hanges are applied immediately.

In the вЂњRequire additional authentication at startupвЂќ policy window,.

Double click вЂњ Require additional authentication at startupвЂњ.In Local Group Policy Editor, navigate toД¬omputer Configuration -> Administrative Templates -> Windows Components -> Bitlocker Drive Encryption -> Operating System Drives.To enable Bitlocker on a machine that does not have a TPM chip, do the following: Modify Local Group Policy to not require TPM for Bitlocker This is more complex, but this keeps the highest security. You can also add a virtual TPM chip to your virtual machine. To enable Bitlocker on your PC, you need to lower the security around unlocking your PC so that no TPM is required to apply Bitlocker to your OS drive. 1.2 Enable TPM in your virtual machine Solutions for This device canвЂ™t use a Trusted Platform Module