What bitlocker configuration do you use and why

azasadny · Jul 22, 2024

I use BitLocker to encrypt my 2TB USB thumbdrive because it has personally identifiable information (PII) on it.

XxXxX · Jul 22, 2024

i use VeraCrypt for my drive encryption.

VeraCrypt - Free Open source disk encryption with strong security for the Paranoid

VeraCrypt is free open-source disk encryption software for Windows, Mac OS X and Linux. In case an attacker forces you to reveal the password, VeraCrypt provides plausible deniability. In contrast to file encryption, data encryption performed by VeraCrypt is real-time (on-the-fly), automatic...

www.veracrypt.fr

its always worked well for me on Windows 11 Home.
hope this of help, best of luck. Steve ..

FreeBooter · Jul 22, 2024

user1010 said:
@FreeBooter it seems that it's only possible to encrypt my C drive. My other disk/volumes isn't available if I go to Manage BitLocker. F: is a usb-drive and is encrypted since earlier.

How To Manage BitLocker Using Command Line In Windows (Manage-bde)

This post discusses how you can enable and disable BitLocker encryption on the operating system (boot) drives as well as fixed drives, set passwords, and

www.itechtics.com

user1010 · Jul 22, 2024

FreeBooter said:
How To Manage BitLocker Using Command Line In Windows (Manage-bde)

This post discusses how you can enable and disable BitLocker encryption on the operating system (boot) drives as well as fixed drives, set passwords, and

www.itechtics.com

PS C:\WINDOWS\system32> manage-bde -on e: -recoverykey C:
BitLocker Drive Encryption: Configuration Tool version 10.0.22621
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

ERROR: An error occurred (code 0x80070057):
The parameter is incorrect.

user1010 · Jul 22, 2024

user1010 said:
PS C:\WINDOWS\system32> manage-bde -on e: -recoverykey C:
BitLocker Drive Encryption: Configuration Tool version 10.0.22621
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

ERROR: An error occurred (code 0x80070057):
The parameter is incorrect.

The problem was that the disk I tried activate Bitlocker on was a dynamic disk. Backed up the data and deleted the volumes. Created a new one as basic disk. Now copying back everything :) My old external WD 2,5" is a little slow :)

Bree · Jul 24, 2024

Bree said:
Personally I feel this is all an unnecessary complication for my devices that are never going to go outside my home, so the first thing I do is remove device encryption with manage-bde C: -off

user1010 said:
Why?

To avoid problems like this one......

Summary	Originating update	Status	Last updated
Devices might boot into BitLocker recovery with the July 2024 security update This issue is more likely to affect devices that have the Device Encryption option enabled	OS Build 22621.3880 KB5040442 2024-07-09	Investigating	2024-07-23 13:57 PT

Known and Resolved issues for Windows 11 version 23H2

https://www.elevenforum.com/t/windows-11-version-23h2-end-of-servicing-on-november-11-2025.33180/ Windows message center: Current status as of July 17, 2024 Windows 11, version 23H2, also known as the Windows 11 2023 Update, is now broadly available to all users with eligible devices who Check...

www.elevenforum.com

user1010 · Jul 24, 2024

Bree said:
To avoid problems like this one......

Summary Originating update Status Last updated
Devices might boot into BitLocker recovery with the July 2024 security update
This issue is more likely to affect devices that have the Device Encryption option enabled OS Build 22621.3880
KB5040442
2024-07-09 Investigating 2024-07-23
13:57 PT

Known and Resolved issues for Windows 11 version 23H2

https://www.elevenforum.com/t/windows-11-version-23h2-end-of-servicing-on-november-11-2025.33180/ Windows message center: Current status as of July 17, 2024 Windows 11, version 23H2, also known as the Windows 11 2023 Update, is now broadly available to all users with eligible devices who Check...

www.elevenforum.com

Kind of sour. It seems it's just to enter the key.

Resulting from this issue, you might be prompted to enter the recovery key from your Microsoft account to unlock your drive.

TraderGary · Jul 24, 2024

I've used only premium laptops for some 20 years. I'm always mobile, even at home. I can't be tied down to a desk in one room. My data is vitally important to me, so I've always used BitLocker.

I also use BitLocker on my two 4TB Samsung T9 SSD drives that I use for my Macrium Reflect image backups. The backup SSD's are always in my backpack and it's imperative that they are protected. If anyone puts one of my backup SSD's in their computer, they get asked for a key. However, when I attach one of the SSD's to my own computer, the key is held in my TPM, and the drive is automatically and transparently unlocked as soon as it's attached. I love it.

glasskuter · Jul 25, 2024

No bitlocker here. Why? Because it's not needed or wanted. If someone did steal my computer, there's nothing on my drive of any value to anyone but me... and all that is backed up multiple times and saved in multiple places No saved passwords as I use a password manager. No private information is kept on the drive. I do not even have secure boot enabled. I'm a very boring computer user so let the hackers hack away. They would be working for nothing and mighty disappointed.

Dru2 · Jul 25, 2024

Both my Windows 10 and Windows 11 laptops (both Lenovo) are BitLocker enabled and neither have even been problematic. Nor has KB KB5040442 caused issues (booted into BitLocker's recovery mode). And since these are mobile devices, they do travel and therefore are prone to being stolen or lost, and why I use and welcome BitLocker. But that's me.

user1010 · Jul 29, 2024

Tried to open the recovery key in the Drive app on the mobile :) It's only working in web browser.

bigarte · Jul 29, 2024

I've never used Bitlocker.

hdmi · Jul 29, 2024

As for why not, it's simply because I don't have DHA anyway.

Device Health Attestation

Learn more about: Device Health Attestation

learn.microsoft.com

As a result of this, Measured Boot is no use to me.

Windows Measured Boot - How It Helps To Secure Windows OS Platform HTMD Blog

Understanding Windows Measured Boot - how it works to help secure the Windows OS platform. Is it same as Secure and Trusted Boot? Read to know more on this.

www.anoopcnair.com

Measured Boot - Compatibility Cookbook

Measured Boot enables remote testing and boot state verification in Windows 8 and Windows Server 2012.

learn.microsoft.com

Secure the Windows boot process - Windows Security

This article describes how Windows security features help protect your PC from malware, including rootkits and other applications.

learn.microsoft.com

So, this makes BitLocker kind of useless to me also, and besides, I am an Enterprise Java developer.
None of my work related secrets ever come into contact with anything that was/is or is going to be touched by Microsoft.
Ever.

CannonRebel · Jul 30, 2024

I use Bitlocker as Whole drive encryption with a Pin to unlock the drive.
I also like these security tools as well:
Veracrypt
Folderlock 7
Right now I'm tinkering around with Wise Folder Hider. It's a unique little piece of software, simple yet effective.

hdmi · Jul 30, 2024

CannonRebel said:
I use Bitlocker as Whole drive encryption with a Pin to unlock the drive.
I also like these security tools as well:
Veracrypt
Folderlock 7
Right now I'm tinkering around with Wise Folder Hider. It's a unique little piece of software, simple yet effective.

After the locker is mounted and the files are decrypted, normally you use the files to do whatever is is that you use them for with your usual programs/apps so, as a direct result of this, these programs/apps will still be able to write plaintext copies of (fragments of) your sensitive data to storage locations outside this locker. There is no simple effective way to avoid this, besides encrypting not only the whole disk, but also each and every single disk that has write access enabled. Choosing to close these programs/apps and unmount the locker offers no guarantee whatsoever that these programs/apps will clean up after themselves, and that no plaintext versions of the data remain scattered in various places also including in places where you never expected them.

This fact has been long established. So, programs like Wise Folder Hider should be avoided with a passion, as any program/app that tries to trick you into believing that all your encrypted data will be held private, when the reality obviously is contrary to this, is your next best equivalent to malvertising.

What bitlocker configuration do you use and why

Jack of all trades – master of none

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Active member

My Computer

Active member

My Computer

Well-known member

My Computers

Active member

My Computer

Stock Market Wizard

My Computers

aka Mama Glass

My Computers

Well-known member

My Computers

Active member

My Computer

New member

My Computer

Jack of all trades – master of none

My Computers

Well-known member

My Computers

Jack of all trades – master of none

My Computers

Similar threads