#Bitlocker drive encryption upgrade#
#Bitlocker drive encryption full#
#Bitlocker drive encryption portable#
#Bitlocker drive encryption verification#

Once these steps are complete, try again to turn on BitLocker by following the earlier steps:

Enable > Check Allow BitLocker without a compatible TPM > Apply.

Navigate to Computer Configuration/Administrative Templates/Windows Components/BitLocker Drive Encryption/Operating System Drives > Require additional authentication at startup (right click/edit or double click) Log on with an administrator account > Start > Windows System > Run > gpedit.msc > navigate to Computer Configuration/Administrative Templates/Windows Components/BitLocker Drive Encryption/Operating System Drives > Require additional authentication at startup (right click/edit or double click) > Enable > Check Allow BitLocker without a compatible TPM > Apply This process will require logging onto an administrator account. If you get the error message, your computer was made without an encryption chip and you can use a USB or PIN as a substitute. The TPM is the encryption chip that allows user accounts to unlock the drive upon startup. Your administrator must set the “Allow BitLocker without a compatible TPM” option in the ‘Require additional authentication at startup’ policy for OS volumes.' Your computer may display an error message that says 'This device can’t use a Trusted Platform Module. Once logged on, navigating folders and saving files will remain the same.

#Bitlocker drive encryption verification#

This verification step is only required on startup once verified, you can log on and out of your user account as normal.

If your computer does not have an encryption chip, you will have an extra verification step on startup before you can log on. Many newer computers have a built-in encryption chip that unlocks your encrypted files when you log on.

#Bitlocker drive encryption upgrade#

Students, faculty and staff can upgrade their Windows 10 system to the Education edition.

#Bitlocker drive encryption full#

Microsoft includes a full disk encryption feature built into Windows called BitLocker.īitLocker is available on supported devices running Windows 10/11 Pro, Enterprise, or Education edition. Enable Full Disk Encryption on Microsoft Windows BitLocker If you encounter any difficulties with the self-service offer or these instructions, contact IT Client Services or your departmental IT support for assistance.įor personally-managed computers, see the instructions for enabling full disk encryption on Windows and Mac below. If you have a University-managed device and do not have administrator privileges on your device, utilize the BigFix Self Service offer for encryption (using instructions for Windows or instructions for macOS ). Storing or processing Institutional Information classified at P3 or higherĮxternal requirements mandate the use of full disk encryption (such as research Data Use Agreements with third-party data providers).

#Bitlocker drive encryption portable#

It is strongly recommended that you store your passwords and recovery keys in a password manager app like LastPass to avoid this issue.įull disk encryption should be implemented for all portable devices when: However, if both the password and the recovery key are unknown or lost, the device cannot be decrypted and the data will be unrecoverable.

When correctly deployed, full disk encryption requires unauthorized users to have both physical access to your device as well as the password in order to decrypt the data on your device. Without full disk encryption, if the data drive in the computer is removed, the data can be easily read and accessed. Full disk encryption protects the data on your device in the event it is lost or stolen.