#Hardware requirments for bitlocker on the go update#
#Hardware requirments for bitlocker on the go full#

#Hardware requirments for bitlocker on the go full#

The BitLocker control panel applet in Windows 8 Consumer Preview and Windows Server '8' Beta provide administrators the ability to choose the Used Disk Space Only or Full encryption method when enabling BitLocker for a volume. Selecting Used Disk Space Only option in Control Panel applet More information on using WMI and BitLocker PowerShell cmdlets will be available on MSDN and TechNet. This document focuses on the BitLocker control panel applet and manage-bde commands for interfacing with BitLocker. There are four interfaces for controlling BitLocker: the BitLocker control panel applet, the manage-bde.exe command line utility, the BitLocker WMI classes and PowerShell cmdlets (new to Windows 8 Consumer Preview and Windows Server '8' Beta). Selecting Used Disk Space Encryption Option An example command is:Р В РІР‚СњР В РІР‚РЋigure : Using the Disable-BitLocker option with each mount point in sequence If a user did not want to input each mount point individually, using the -MountPoint parameter in an array can sequence the same command into one line without requiring additional user input. An example of this command is:Р В РІР‚СњР В РІР‚РЋigure : Disable-BitLocker command with user input for each volume Using the Disable-BitLocker command, they can remove all protectors and encryption at the same time without the need for additional commands. In the example below, the user has three encrypted volumes, which they wish to decrypt. The additional advantage Windows PowerShell offers is the ability to decrypt multiple drives in one pass. If a user wishes to check the status of the decryption, they can use the following command:Р В РІР‚СњР В РІР‚РЋigure : Manage-bde decryption process indicatorР В РІР‚СњР вЂ™Р’Вecrypting volumes using the BitLocker Windows PowerShell cmdletsР В РІР‚СњР вЂ™Р’Вecryption with Windows PowerShell cmdlets is straightforward, similar to manage-bde. This command disables protectors while it decrypts the volume and removes all protectors when decryption is complete.

Manage-bde uses the -off command to start the decryption process. Decryption with manage-bde offers the advantage of not requiring user confirmation to start the process.

#Hardware requirments for bitlocker on the go update#

With decryption complete, the drive will update its status in the control panel applet and is available for encryption.Р В РІР‚СњР вЂ™Р’Вecrypting volumes using the manage-bde command line interfaceР В РІР‚СњР вЂ™Р’Вecrypting volumes using manage-bde is very straightforward. Selecting the notification area icon will open a modal dialog with progress.Р В РІР‚СњР В РІР‚РЋigure : Decryption progress from notification area The control panel applet does not report decryption progress but displays it in the notification area of the task bar. With Turn off BitLocker confirmed, the drive decryption process will begin and report status to the control panel applet.Р В РІР‚СњР В РІР‚РЋigure : Confirmation dialog prior to starting decryption Once selected, the user chooses to continue by clicking the confirmation dialog.

After opening the BitLocker control panel applet, users will select the Turn off BitLocker option to begin the process.Р В РІР‚СњР В РІР‚РЋigure : Turn off BitLocker option for an encrypted volume The control panel can be called from Windows Explorer or by opening the applet directly. We will discuss each method further below.Р В РІР‚СњР вЂ™Р’Вecrypting volumes using the BitLocker control panel appletР В РІР‚СњР вЂ™Р’В«itLocker decryption using the control panel applet is wizard driven. BitLocker can be removed from a volume using the BitLocker control panel applet, manage-bde or Windows PowerShell cmdlets.

BitLocker encryption should not occur as a troubleshooting step. Decryption should occur when protection is no longer required. If the encryption uses the Used Disk Space Only option described later in this document, this step takes only a few seconds and incorporates well into regular deployment processes.Р В РІР‚СњР вЂ™Р’Вecrypting volumes removes BitLocker and any associated protectors from the volumes. This is done with a randomly generated clear key protector applied to the formatted volume and encrypting the volume prior to running the Windows setup process. In Windows Server '8' Beta, administrators can enable BitLocker prior to operating system deployment, from the Windows Pre-installation Environment. Provisioning BitLocker during operating system deployment This command will display information about the encryption method, volume type, key protectors, etc.Р В РІР‚СњР В РІР‚РЋigure : Detailed output of BitLocker status using Windows PowerShell To get information that is more detailed on a specific volume, use the following command: Using the Get-BitLockerVolume cmdlet, each volume on the system will display its current BitLocker status. Like manage-bde, Windows PowerShell includes the advantage of being able to check the status of a volume on a remote computer. Windows PowerShell commands offer another way to query BitLocker status for volumes. Checking BitLocker status with Windows PowerShell