Windows BitLocker Computer Encryption with Windows BitLocker | Information Technology Services (2024)

Computer Encryption with Windows BitLocker

•Windows 7

BitLocker (TMP) Accordion Closed

Enabling BitLocker with a TPM Chip with Windows 7

Step 1

Restart the computer. When the Dell logo appears, tap the “F2” key on your keyboard repeatedly until the message “Entering Setup” appears. This will bring you to the Dell BIOS menu.

Step 2

Note: Some versions of BIOS do not allow you to navigate with a mouse or touchpad. If this is the case, use the arrow keys, space bar, and enter key on your keyboard to navigate, open, and select.

Note: The following screen shots show the BIOS of a Dell Optiplex 7020 desktop. Your computer’s BIOS may look very different, but the concepts and locations should all be the same.

Open the “Security” tree by clicking the “+” next to it. (Note: The space bar on your keyboard will also open the tree.) Then, navigate to “TPM Security”.

Step 3

If the check box next to “TPM Security” is already checked, skip to Step 6. If it is not, check the check box next to “TPM Security”. Then, select the “Apply” button.

Step 4

Then, select the “Exit” button.

Step 5

Repeat Step 1 to re-enter the Dell BIOS. Then, repeat Step 2 to navigate back to “Security > TPM Security”.

Step 6

If the radio button next to “Activate” is already selected, and the check boxes next to “TPM Security” and “TPM ACPI Support” are already checked, move to Step 9. If it is not, select the radio button next to “Activate”. Ensure only the “TPM Security” and “TPM ACPI Support” check boxes are checked. Then, select the “Apply” button.

Step 7

Then, select the “Exit” button.

Step 8

Repeat Step 1 to re-enter the Dell BIOS.

Step 9

Open the “General” tree by clicking the “+” next to it. (Note: The space bar on your keyboard will also open the tree.) Then, navigate to “Boot Sequence”.

Step 10

In the Boot Sequence list, ensure that the “internal HDD” is above “USB Storage Device”. If it is not, select the item in the list and use the arrow buttons beside the list to move the selected item up or down. Then, select the “Apply” button.

(Note: The internal HDD in this example is listed as “WDC WD5000AAKX-75U6AAC”, and can be listed as something very different in your machine.)

Step 11

Then, select the “Exit” button. Allow the machine to boot Windows normally.

Step 12

Log onto Windows using an NAU domain account that has Administrator privileges.

Step 13

Open the Start Menu (usually located in the bottom-left hand corner).

Step 14

Click on “Control Panel” from the Start Menu.

Step 15

From the Control Panel menu, click on “System and Security”.

Step 16

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 17

Click “Turn on Bitlocker”.

Step 18

When you get to the window asking “How do you want to store your recovery key?”, you may select any of the given options to store and save your recovery key. The key will automatically be sent to an NAU database.

Note: If you choose to create a backup recovery key, do NOT store it anywhere near the computer it unlocks.

Once you have decided what to do with your recovery key, click “Next”.

Step 19

Click “Start Encrypting” to begin the encryption process.

Note: The encryption will likely take several hours to complete. The computer may be used as normal during this time. If the computer is shut down, the encryption process will pause until the computer is turned on again.

BitLocker (USB) Accordion Closed

Enabling BitLocker with a USB Key with Windows 7

Step 1

Restart the computer. When the Dell logo appears, tap the “F2” key on your keyboard repeatedly until the message “Entering Setup” appears. This will bring you to the Dell BIOS menu.

Step 2

Note: Some versions of BIOS do not allow you to navigate with a mouse or touchpad. If this is the case, use the arrow keys, space bar, and enter key on your keyboard to navigate, open, and select.

Note: The following screen shots show the BIOS of a Dell Optiplex 7020 desktop. Your computer’s BIOS may look very different, but the concepts and locations should all be the same.

Open the “General” tree by clicking the “+” next to it. (Note: The space bar on your keyboard will also open the tree.) Then, navigate to “Boot Sequence”.

Step 3

(Note: The internal HDD in this example is listed as “WDC WD5000AAKX-75U6AAC”, and can be listed as something very different in your machine.)

Step 4

Then, select the “Exit” button. Allow the machine to boot Windows normally.

Step 5

Log onto Windows using an NAU domain account that has Administrator privileges.

Step 6

Open the Start Menu (usually located in the bottom-left hand corner).

Step 7

Click on “Control Panel” from the Start Menu.

Step 8

From the Control Panel menu, click on “System and Security”.

Step 9

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 10

Click “Turn on Bitlocker”.

Step 11

When you get to the window asking “How do you want to store your recovery key?”, click on the “Save the recovery key to a USB flash drive” option. You may choose any of the other options as well to back up your recovery key. The key will automatically be sent to an NAU database.

Note: If you choose to create a backup recovery key, do NOT store it anywhere near the computer it unlocks.

Then, click “Next”.

Step 12

Click “Start Encrypting” to begin the encryption process.

BitLocker – Suspend Protection Accordion Closed

Suspending BitLocker Protection with Windows 7

Step 1

Open the Start Menu (usually located in the bottom-left hand corner).

Step 2

Click on “Control Panel” from the Start Menu.

Step 3

From the Control Panel menu, click on “System and Security”.

Step 4

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 5

Under “BitLocker Drive Encryption – Hard Disk Drives”, select “Suspend Protection”.

Step 6

When the dialog box prompts asking “Do you want to suspend BitLocker Drive Encryption”, click the “Yes” button.

The BitLocker Drive Encryption will now list its status as “Suspended” with a exclamation point inside a yellow triangle over the drive logo.

BitLocker – Resume Protection Accordion Closed

Resuming BitLocker Protection with Windows 7

Step 1

Open the Start Menu (usually located in the bottom-left hand corner).

Step 2

Click on “Control Panel” from the Start Menu.

Step 3

From the Control Panel menu, click on “System and Security”.

Step 4

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 5

Under “BitLocker drive Encryption – Hard Disk Drives”, select “Resume Protection”.

The BitLocker Drive Encryption will now list its status as “On”.

•Windows 8

BitLocker (TPM) Accordion Closed

Enabling BitLocker with a TPM Chip with Windows 8

Step 1

Restart the computer. When the Dell logo appears, tap the “F2” key on your keyboard repeatedly until the message “Entering Setup” appears. This will bring you to the Dell BIOS menu.

Step 2

Note: Some versions of BIOS do not allow you to navigate with a mouse or touchpad. If this is the case, use the arrow keys, space bar, and enter key on your keyboard to navigate, open, and select.

Note: The following screen shots show the BIOS of a Dell Optiplex 7020 desktop. Your computer’s BIOS may look very different, but the concepts and locations should all be the same.

Open the “Security” tree by clicking the “+” next to it. (Note: The space bar on your keyboard will also open the tree.) Then, navigate to “TPM Security”.

Step 3

If the check box next to “TPM Security” is already checked, skip to Step 6. If it is not, check the check box next to “TPM Security”. Then, select the “Apply” button.

Step 4

Then, select the “Exit” button.

Step 5

Repeat Step 1 to re-enter the Dell BIOS. Then, repeat Step 2 to navigate back to “Security > TPM Security”.

Step 6

Step 7

Then, select the “Exit” button.

Step 8

Repeat Step 1 to re-enter the Dell BIOS.

Step 9

Open the “General” tree by clicking the “+” next to it. (Note: The space bar on your keyboard will also open the tree.) Then, navigate to “Boot Sequence”.

Step 10

(Note: The internal HDD in this example is listed as “WDC WD5000AAKX-75U6AAC”, and can be listed as something very different in your machine.)

Step 11

Then, select the “Exit” button. Allow the machine to boot Windows normally.

Step 12

Log onto Windows using an NAU domain account that has Administrator privileges.

Step 13

Open the Start Menu (usually located in the bottom-left hand corner).

Step 14

Search for the “Control Panel”. To begin searching within the Start Menu, simply just start typing “control panel” (it is NOT necessary to click inside a search bar). When the Control Panel application appears, click to open it.

Step 15

From the Control Panel menu, click on “System and Security”.

Step 16

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 17

Click “Turn on Bitlocker”.

Step 18

Note: If you choose to create a backup recovery key, do NOT store it anywhere near the computer it unlocks.

Once you have decided what to do with your recovery key, click “Next”.

Step 19

Click “Start Encrypting” to begin the encryption process.

BitLocker (USB) Accordion Closed

Enabling BitLocker with a USB Key with Windows 8

Step 1

Restart the computer. When the Dell logo appears, tap the “F2” key on your keyboard repeatedly until the message “Entering Setup” appears. This will bring you to the Dell BIOS menu.

Step 2

Note: Some versions of BIOS do not allow you to navigate with a mouse or touchpad. If this is the case, use the arrow keys, space bar, and enter key on your keyboard to navigate, open, and select.

Note: The following screen shots show the BIOS of a Dell Optiplex 7020 desktop. Your computer’s BIOS may look very different, but the concepts and locations should all be the same.

Open the “General” tree by clicking the “+” next to it. (Note: The space bar on your keyboard will also open the tree.) Then, navigate to “Boot Sequence”.

Step 3

(Note: The internal HDD in this example is listed as “WDC WD5000AAKX-75U6AAC”, and can be listed as something very different in your machine.)

Step 4

Then, select the “Exit” button. Allow the machine to boot Windows normally.

Step 5

Log onto Windows using an NAU domain account that has Administrator privileges.

Step 6

Open the Start Menu (usually located in the bottom-left hand corner).

Step 7

•Windows 10

BitLocker (TPM) Accordion Closed

Enabling BitLocker with a TPM Chip with Windows 10

Step 1

Restart the computer. When the Dell logo appears, tap the “F2” key on your keyboard repeatedly until the message “Entering Setup” appears. This will bring you to the Dell BIOS menu.

Step 2

Note: Some versions of BIOS do not allow you to navigate with a mouse or touchpad. If this is the case, use the arrow keys, space bar, and enter key on your keyboard to navigate, open, and select.

Note: The following screen shots show the BIOS of a Dell Optiplex 7020 desktop. Your computer’s BIOS may look very different, but the concepts and locations should all be the same.

Open the “Security” tree by clicking the “+” next to it. (Note: The space bar on your keyboard will also open the tree.) Then, navigate to “TPM Security”.

Step 3

If the check box next to “TPM Security” is already checked, skip to Step 6. If it is not, check the check box next to “TPM Security”. Then, select the “Apply” button.

Step 4

Then, select the “Exit” button.

Step 5

Repeat Step 1 to re-enter the Dell BIOS. Then, repeat Step 2 to navigate back to “Security > TPM Security”.

Step 6

If the radio button next to “Activate” is already selected, and the check boxes next to “TPM Security” and “TPM ACPI Support” are already checked, move to Step 9. If it is not, select the radio button next to “Activate”. Ensure only the “TPM Security” and “TPM ACPI Support” check boxes are checked. Then, select the “Apply” button.

Step 7

Then, select the “Exit” button.

Step 8

Repeat Step 1 to re-enter the Dell BIOS.

Step 9

Open the “General” tree by clicking the “+” next to it. (Note: The space bar on your keyboard will also open the tree.) Then, navigate to “Boot Sequence”.

Step 10

(Note: The internal HDD in this example is listed as “WDC WD5000AAKX-75U6AAC”, and can be listed as something very different in your machine.)

Step 11

Then, select the “Exit” button. Allow the machine to boot Windows normally.

Step 12

Log onto Windows using an NAU domain account that has Administrator privileges.

Step 13

Open the Start Menu (usually located in the bottom-left hand corner of the desktop).

Step 14

Search for the “Control Panel”. To begin searching within the Start Menu, simply just start typing “control panel” (it is NOT necessary to click inside a search bar). When the Control Panel application appears, click to open it.

Step 15

From the Control Panel menu, click on “System and Security”.

Step 16

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 17

From the BitLocker Drive Encryption menu, click “Turn on BitLocker”.

Step 18

When you get to the window asking “How do you want to back up your recovery key?”, you may select any of the given options to store and save your recovery key. The key will automatically be sent to an NAU database.

Note: If you choose to create a backup recovery key, do NOT store it anywhere near the computer it unlocks.

Once you have decided what to do with your recovery key, click “Next”.

Step 19

From the “Choose how much of your drive to encrypt” menu, select “Encrypt entire drive”. Then, click “Next”.

Step 20

Click on “Start encrypting”.

Note: The encryption will likely take several hours to complete. The computer may be used as normal during this time, but you might see a decrease in your PC’s performance. If the computer is shut down, the encryption process will pause until the computer is turned on again.

BitLocker (USB) Accordion Closed

Enabling BitLocker with a USB Key with Windows 10

Step 1

Restart the computer. When the Dell logo appears, tap the “F2” key on your keyboard repeatedly until the message “Entering Setup” appears. This will bring you to the Dell BIOS menu.

Step 2

Note: Some versions of BIOS do not allow you to navigate with a mouse or touchpad. If this is the case, use the arrow keys, space bar, and enter key on your keyboard to navigate, open, and select.

Note: The following screen shots show the BIOS of a Dell Optiplex 7020 desktop. Your computer’s BIOS may look very different, but the concepts and locations should all be the same.

Open the “General” tree by clicking the “+” next to it. (Note: The space bar on your keyboard will also open the tree.) Then, navigate to “Boot Sequence”.

Step 3

(Note: The internal HDD in this example is listed as “WDC WD5000AAKX-75U6AAC”, and can be listed as something very different in your machine.)

Step 4

Then, select the “Exit” button. Allow the machine to boot Windows normally.

Step 5

Log onto Windows using an NAU domain account that has Administrator privileges.

Step 6

Open the Start Menu (usually located in the bottom-left hand corner of the desktop).

Step 7

Step 8

From the Control Panel menu, click on “System and Security”.

Step 9

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 10

From the BitLocker Drive Encryption menu, click “Turn on BitLocker”.

Step 11

When you get to the window asking “How do you want to back up your recovery key?”, click on the “Save to a USB flash drive” option. You may choose any of the other options as well to back up your recovery key.

Select the USB you would like to save the recovery key to. Then, click “Save”. The key will automatically be sent to an NAU database.

Note: If you choose to create a backup recovery key, do NOT store it anywhere near the computer it unlocks.

Once you have saved your recovery key to a USB device, click “Next” back on the recovery key options menu.

Step 12

From the “Choose how much of your drive to encrypt” menu, select “Encrypt entire drive”. Then, click “Next”.

Step 13

Click on “Start encrypting”.

BitLocker – Suspend Protection Accordion Closed

Suspending BitLocker Protection with Windows 10

Step 1

Open the Start Menu (usually located in the bottom-left hand corner of the desktop).

Step 2

Step 3

From the Control Panel menu, click on “System and Security”.

Step 4

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 5

Under “Operating system drive”, select “Suspend protection”.

Step 6

When the dialog box prompts asking “Do you want to suspend BitLocker Drive Encryption”, click the “Yes” button.

The BitLocker Drive Encryption will now list its status as suspended with a exclamation point inside a yellow triangle over the drive logo.

BitLocker – Resume Protection Accordion Closed

Resuming BitLocker Protection with Windows 10

Step 1

Open the Start Menu (usually located in the bottom-left hand corner of the desktop).

Step 2

Step 3

From the Control Panel menu, click on “System and Security”.

Step 4

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 5

Under “Operating system drive”, select “Resume protection”.

The BitLocker Drive Encryption will now list its status as “on”.

BitLocker – Save a Copy of the Recovery Key Accordion Closed

Step 1

Open the Start Menu (usually located in the bottom-left hand corner of the desktop).

Step 2

Step 3

From the Control Panel menu, click on “System and Security”.

Step 4

From the System and Security menu, click on “BitLocker Drive Encryption”.

Step 5

Under “Operating system drive”, select “Back up your recovery key”.

Step 6

When asked “How do you want to back up your recovery key?”, select “Save to a file”. (Note: You may also choose to print the recovery key.)

Step 7

The File Explorer window will open. Select a location (either a USB or network drive) to save your recover key to. Then, click “Save”. (Note: You will receive an error if you attempt to save the recovery key to an encrypted drive.)

Step 8

Once you have saved the file, click the “Finish” button.

FAQs

Windows BitLocker Computer Encryption with Windows BitLocker | Information Technology Services? ›

Device Encryption is a Windows feature that enables BitLocker

BitLocker
BitLocker is a Windows security feature that protects your data by encrypting your drives. This encryption ensures that if someone tries to access a disk offline, they won't be able to read any of its content.
https://support.microsoft.com › en-us › windows › bitlocker-o...
BitLocker overview - Microsoft Support

encryption automatically for the Operating System drive and fixed drives. It's particularly beneficial for everyday users who want to ensure their personal information is safe without having to manage complex security settings.

Read On ›

What is Windows BitLocker encryption? ›

BitLocker Drive Encryption, or BitLocker, is a Microsoft Windows security and encryption feature that is included with certain newer versions of Windows. BitLocker enables users to encrypt everything on the drive Windows is installed on, protecting that data from theft or unauthorized access.

Discover More Details ›

Why does BitLocker come up on my computer? ›

If you experiences that the computer shows BitLocker recovery screen after power on, it means that the HDD/SDD has been encrypted. (HDD/SDD is locked.)

Why does Windows keep asking for BitLocker? ›

Whenever you connect a drive to your PC and it is detected in the boot list, BitLocker will ask for the recovery key. If you're not connecting any devices and it keeps asking for the recovery key, it is because the boot support for Preboot for TBT and USB-C/TBT is turned on by default.

See Details ›

Do I need BitLocker Drive Encryption Service? ›

Individual users with sensitive information: If you store sensitive information, such as personal identification, financial data, or medical records on your computer, enabling BitLocker can help keep this information safe from unauthorized access.

Find Out More ›

Is it possible to unlock BitLocker without a key? ›

If you don't have the BitLocker password and recovery key, you may need to format the drive to remove the encryption, or use the third-party tools, such as Passware Kit, Elcomsoft Forensic Disk Decryptor, and Elcomsoft Distributed Password Recovery.

Tell Me More ›

What causes BitLocker to trigger? ›

The BitLocker recovery key prompt can be triggered by a variety of reasons, including hardware changes, software updates (especially if BIOS update is involved), etc. It is not necessarily alarming. The recent security update can be definitely a trigger here as well.

Show Me More ›

How do I get my computer out of BitLocker mode? ›

To exit the BitLocker recovery screen, you will need to enter the recovery key. The recovery key is a 48-digit code that was provided to you when you first enabled BitLocker on your device. If you don't have the recovery key, you can't enter the drive.

Explore More ›

What malware turns on BitLocker? ›

The malware ShrinkLocker alters various registry keys to change how BitLocker handles encryption, potentially bypassing TPM requirements, enabling BitLocker without TPM and enforcing specific startup key and PIN configurations.

Is BitLocker legit? ›

BitLocker is very good way to protect our files from anauthorized access without using correct private key. Most of critical user computers are protecting by the BitLocker which is working very stable and speed.

Show Me More ›

Can I turn off BitLocker? ›

Follow the steps given below to remove bitlocker encryption in GUI mode, Click Start, click Control Panel, click System and Security, and then click BitLocker Drive Encryption. Look for the drive on which you want BitLocker Drive Encryption turned off, and click Turn Off BitLocker.

Read The Full Story ›

Why am I getting a BitLocker recovery message? ›

Bitlocker recovery mode can be triggered by a number of situations, including: A malicious attempt by a person or software to change the startup environment. Rootkits are one example. Moving the BitLocker-protected drive into a new computer.

See Details ›

Why has BitLocker been activated? ›

Windows interprets this as approval to encrypt. BitLocker encryption is often intentionally activated by or on behalf of a user with full administrative access to your device.

Get More Info Here ›

Is there a downside for using BitLocker? ›

Cons of BitLocker

Asking a nontechnical user to know things about encryption keys and proper storage or backup of these keys is a bit much. Not having the key can lock legitimate users out of their own data and using BitLocker can significantly impact performance (up to 45%) in some cases.

What is the main purpose of BitLocker? ›

BitLocker is a Windows security feature that provides encryption for entire volumes, addressing the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned devices.

How much does BitLocker cost? ›

BitLocker is their free, built-in encryption solution designed for Windows operating systems.

View Details ›

How do I unlock BitLocker? ›

To unlock their drives, users must open “This PC” (or “My Computer”, depending on the version of Windows), right-click on the encrypted drive icons with the locked yellow padlock icon, click "Unlock Drive" and provide the Password.

What are the disadvantages of BitLocker? ›

Cons of BitLocker

Asking a nontechnical user to know things about encryption keys and proper storage or backup of these keys is a bit much. Not having the key can lock legitimate users out of their own data and using BitLocker can significantly impact performance (up to 45%) in some cases.

Learn More ›