Shulou(Shulou.com)06/03 Report--

The customer requires the project machine to enable BitLocker encryption, and Win10 by default, the system disk BitLocker cannot be enabled (as shown in figure 1.1), and the local group policy must be changed.

Figure 1.1 the BitLocker function of the system disk cannot be started by default

1. Change the local group policy

Start > > run > > gpedit.msc, open the Group Policy Editor, navigate to computer configuration > Administrative templates > Windows components > BitLocker Drive encryption > operating system drives (figure 1.2), locate the additional authentication required on startup setting, and change the status to enabled (figure 1.3).

Figure 1.2 locate the corresponding path from the Group Policy Editor to BitLocker

Figure 1.3 enable "additional authentication required on startup"

2. Enable BitLocker on the system disk

Navigate to the system drive letter (usually C) in the computer, right-click and select "enable BitLocker" (shown in figure 2.1), and automatically run the BitLocker drive encryption wizard (shown in figure 2.2).

Figure 2.1 start BitLocker

Figure 2.2 run the BitLocker Drive encryption wizard

2.1 choose how to unlock your drive at startup

To choose how to unlock the drive at startup, you can choose "insert USB disk" or "enter password". Here we select "enter password" and enter the set password in the "enter password" box (as shown in figure 2.3 and 2.4).

Figure 2.3 Select "enter password"

Figure 2.4 enter the set password

2.2 backup recovery key

To back up the BitLocker recovery key, you must back it up, otherwise you cannot take the next step, and the backup path cannot be the root directory of the local disk, as shown in figures 2.5 and .6.

Figure 2.5 backup recovery key

Figure 2.6 the path to the backup cannot be the root of the local disk

2.3 Select encrypted space and encryption mode

Select the drive space to be encrypted, and select "encrypt only used disk space" or "encrypt the entire drive" depending on the actual situation (as shown in figure 2.7).

Select the encryption mode you want to use, and select "New encryption Mode" or "compatible Mode" according to the actual situation (figure 2.8).

Figure 2.7 Select the amount of drive space to encrypt

Figure 2.8 Select the encryption mode to use

2.4 Last setting

After the previous setting, pop-up "are you ready to encrypt the drive", if you choose to continue, it will pop up "must restart the computer", click "restart now" will automatically restart the machine and start the BitLocker encryption process (figure 2.9,2.10).

Figure 2.9 whether the drive is ready to be encrypted

Figure 2.10 requires a restart of the computer

2.5 encrypted driv

After clicking "restart the computer now", it will automatically restart and stay in BitLocker to enter the password to unlock the drive, and only after entering the password correctly can you start the system "as shown in figure 2.11".

Figure 2.11 Startup stays in the input password interface

After entering the password to start the system, BitLocker will encrypt the system initiator in the background and regret the pop-up prompt "C: encryption is complete", as shown in figure 2.12.

Figure 2.12 encryption completes the pop-up prompt.

3. Forget BitLocker password recovery

When you restart the computer, you need to enter the BitLocker password to start the system. If you forget the password, you can press the "ESC" key in the BitLocker unlock interface for BitLokcer recovery. Enter the recovery key in the recovery key file in the BitLocker recovery interface to enter the system (figure 3.1,3.2,3.3)

Figure 3.1 BitLocker enter password to start the system

Figure 3.2 enter the BitLocker recovery key to enter the system

Figure 3.3 saved BitLocker recovery key

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.