Over 1 million tech questions and answers.

Disable Bitlocker? Thinkpad crashed; cannot perform system restore -- bitlocker key but no password

Q: Disable Bitlocker? Thinkpad crashed; cannot perform system restore -- bitlocker key but no password

Am super frustrated and would appreciate any help. ThinkPad X1 6th Gen has been dead more than a week; OS crashed, but several reboot and repair efforts failed. Tried system restore. That required a bitlocker key (which I found online) but then the machine would not accept my account password. So unable to restore. Multiple calls with Thinkpad warranty support (hardware and software) could provide no help or guidance. (Except to send restoration media.) Mind-boggling lack of support... and no way to escalate issue to someone who actually understood it. Deeply disappointing experience w/ Lenovo. . So now the question is how -- after I reset my system -- do I avoid this nonsense in the future? I shouldn't have to rebuild my laptop from scratch anytime there is an OS problem. BTW, I did not order bitlocker, set up bitlocker or create any password for it. Do not need it or want it. Can anyone help with advice on how to set up my machine without it? Thanks.

Read other answers
Preferred Solution: Disable Bitlocker? Thinkpad crashed; cannot perform system restore -- bitlocker key but no password

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)


I have an older Laptop that operates on  Windows 7 Ultimate,I have the Bitlocker Drive Encryption on and encrypted for Drive C:   I now started the process of encrypting my external usb hdd Drive E: which has a long way to go for it's large
size. During the encryption I needed to disconnect it so I paused the encryption like it says to do before removing or changing any files on it. I then plugged my drive into a newer laptop I have that operates on Windows 10,. I was prompted for the Bitlocker
Drive Encryption Password screen like normal just like on my Windows 7 laptop so I enter the password and it was correct and it began the encryption process again. When I finished with what I needed to do on the Windows 10 laptop I paused the encryption again
and disconnected the drive. I am now back on my Windows 7 Ultimate OS and plugged the drive in, Bitlocker Encryption Password Screen comes up again and I entered my password but now for some reason it's saying the password is incorrect?  "But It's
not incorrect",is there a reason why this has happen and a way to fix it? My second issue is that I have the recovery key written down on paper but on the fifth line of the eight lines that makes the recovery key I left out a number,did not write it correctly,
there for I cannot just reset my password using the key and get back to normal again. Any way to find the lost number to the key? As I do have the rest of it written correctly please help tha... Read more

Read other answers

Hello and good afternoon, I have a issue where a manager started the Bitlocker process on the SD card in his Surface Pro 3

with Windows 8.1. The Bitlocker attempt failed at 3.4% completed but the SD card ended up being Bitlocked without providing the Bitlocker Recovery Key (I've never seen this happen before). He doesn't know the password for the SD card and of course
I've been tasked to somehow release the encryption so that he can get the required information off of the SD card. 

Is there anything that can be done to release the encryption on the SD card or has the SD card been made non-accessible moving forward?

Read other answers

I would like to enable BitLocker on my laptop, which has a TPM. However, I want to use a password instead of the TPM to decrypt the drive during pre-boot.

I've tried disabling the TPM (using 'tpm.msc') and then enabling "Require additional authentication at startup" within the Group Policy Editor, but those steps didn't work.

How can I disable the TPM and use a password instead? Alternatively, how can I keep the TPM enabled but also require a password (not a PIN) during pre-boot?


Read other answers

My BitLocker password is not working after format my c drive. instead i have my recovery that is also not working.
Please somebody help me to unlock my disk.

Read other answers

Hi Mr/Ms
drive encrypted
with BitLocker 
I used
driver for three months my computer is broken I bought a new computer    when i was try my flash disk new computer its give me this  problem 
BitLocker Drive Encryption failed to recover from an abruptly terminated conversion. This could be due to either all conversion logs being corrupted or the media being write-protected
? know my passworrd but I do not know
the BitLocker
recovery key what can i do know pls some one help me 

Read other answers

I have formatted my system near a technician, upon formatting the system my drive name has been renamed from E drive to G drive. While I am trying to unlock the drive it's displaying the message as "The request could not be performed because of an I/O device error". I have got the recovery key with me but it is also not working. Please help me in this matter as the data in the G drive is very valuable.
with regards naresh jadhav

Read other answers

I am running Windows 10 Pro. I am using BitLocker on a non-system drive and not on my system drive. I am not planning on using it on my system drive. I do not have a TPM compatible computer.

Once I log into Windows, I would like to be prompted for the password to unlock my data drive. I did have this running correctly before I started having problems with my computer and had to do a clean install of Windows 10. I have searched for hours but can't find the article that walked me through how to do this.

I found a ton of articles that don't fit my situation because I don't want to auto-unlock, use a USB key or encrypt my system drive.

I would be very grateful if anyone can help me with this.


Jason P.

A:Have Bitlocker Prompt for Password on Non-System Drive

Originally Posted by Jason P

I am running Windows 10 Pro. I am using BitLocker on a non-system drive and not on my system drive. I am not planning on using it on my system drive. I do not have a TPM compatible computer.

Once I log into Windows, I would like to be prompted for the password to unlock my data drive. I did have this running correctly before I started having problems with my computer and had to do a clean install of Windows 10. I have searched for hours but can't find the article that walked me through how to do this.

I found a ton of articles that don't fit my situation because I don't want to auto-unlock, use a USB key or encrypt my system drive.

I would be very grateful if anyone can help me with this.


Jason P.

This should help: BitLocker - Turn On for Fixed Data Drives in Windows 8

Read other 3 answers

Dear Sir/Madam,

I encrypted my laptop system drive using Bitlocker. I remembered the password but forgot to backup the Recovery Key.

Usually, the system will be bootup without asking for the Bitlocker password or Recovery key. But one day, when booting up the sytem, the "BitLocker recovery" blue screen pop up to ask for Bitlocker Recovery Key.

I forgot to backup the Recovery Key. But I remembered the password. I also connected the harddisk of this laptop to other PC, and tried to unlock the hard disk using Bitlocker password. But there is no password option to unlock the hard disk.

Is it possible to unlock the drive using Bitlocker password?

Thank you.

Best regards,

Read other answers

I am resetting my surface pro 3 to factory reset. it lock me out to bitlocker key. it shows me the key id. how can i retrieve the bitlocker key?

Read other answers

After rebooting one of our test machines, bitlocker wanted the recovery key.
There were no hardware modifications on that machine.
Error message in event log:
Bootmgr failed to obtain the bitlocker volume master key from the TPM because the PCRs did not match
Event id 24635, source bitlocker-driver
 Each time the machine starts, the recovery key is needed.
Any idea how to solve that issue and why it happens?
Second partition was created manually on that machine. So that's clear that bitlocker reacts...
But now: how can I confirm those changes so that the recovery key is not needed each time we boot?

A:Bitlocker enabled drive, recovery key needed during boot, PCS did not match, event id 24635, source bitlocker-driver

I would like to confirm if BitLocker accepts the recovery key?
Please update the BIOS to improve the stability for TPM first.
I also would like to suggest you disable and enable BitLocker again to reset the settings.
For more information, please refer to the following link:
Arthur Li
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
[email protected]
 Please remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Read other 8 answers

I tried using HP BIOS Flashing utility on my HP Z400 Workstation, and it says it can't continue because I have Bitlocker enabled, but I don't have bitlocker on Win 7 Professional 32bit. I don't see it on the control panel or in context menus. I do see it set to manual in "Services" but the service in not running. Is there a way to find drives Bitlocked or are my drives being treated as bitlocked because of my antivirus program AVG?

A:BIOS flash error, BITLOCKER on? No bitlocker installed, Win 7 Pro

In the services window is there and option to disable or turn off...there should be. Just change the startup type from manual to disable and reboot. Then try your BIOS update.

Read other 5 answers

Hello experts,

I have an HP desktop Intel Core2 Quad Q6600 2.4GHz, 3GB RAM, NVIDIA GeForce 8400 GS, and Windows 8 64bit. In the last couple of days, I tried to encrypt 2 of my external HDs (1.5TB and 3TB) using the BitLocker, but near the end of the encryption (which took 2.5 days), the graphic driver crashed and caused the system to restart. After the restart, the NVIDIA graphic driver became unusable and the system switched to the Microsoft Basic Display driver. I have tried to re-install the graphic driver (downloaded from the NVIDIA site), , update the driver, refresh the system, and restored the system to the original settings; but none of these steps helped. In the Device Manager, the NVIDIA GeForce 8400 GS is showing with a yellow exclamation. I have been thinking about replacing the graphic card, but I am not sure whether buying a new card will help.

Any suggestions would be greatly appreciated!

A:Graphic driver crashed after running BitLocker

u tried to reinstall nvidia driver? weird stuff dude, but 2.5 days forget it. Oh i see you did try, how about doing it in safe mode, or uninstalling then reinstalling. if it is showing exclamation, then it is not taking the driver...try safe mode

Read other 2 answers

I turned on Bitlocker on three new Windows 8.1 laptops and saved the 48-digit recovery keys and associated identifiers, but I forgot to indicate which laptops they are associated with. Is there any way to find the identifiers/recovery keys on my laptops so I can document this? Or do I have to decrypt the laptop drives, turn off Bitlocker, and start all over again to generate new identifiers/recovery keys? My only options under Manage Bitlocker are Suspend protection, Back up your recovery key, and Turn off BitLocker.

A:BitLocker Identifier generated after turning on Bitlocker

Hello Edwin, and welcome to Eight Forums.

No worries. If you should ever need to unlock to drive, it'll provide you with a recovery key ID number that you can use to ID which recovery key to use. The tutorial below can give you more details about this to help get an idea if ever needed.

BitLocker Recovery - Unlock a Drive in Windows 8

Read other 5 answers

BitLocker came enabled by default on my out-of-the-box windows configuration of a Thinkpad X1 Carbon 5th Generation that I got a few months ago (disk drive is a Samsung SSD 1TB PCIe-NVMe MZ-VLW1T0 HMLH-000L7). As a result, I cannot re-partion the drive, access it outside of Windows, nothing! Cannot make images. I et I will be unable to restore an image. This is very unsatisfying. Windows tells me that Bitlocker is actually not activated, ha! Tus no de-actiavtion possible (not that I would have any key). How to fix this situation? Nice and safe is fine, but as it is, this hard disk is even safe from his very owner! Any advice would be appreciated. Cheers,Christian

Read other answers

bitlocker was enabled in bios menu. now I'm stuck on the wimdows bitlocker drive encryption recovery key entry page and I do not have a recovery key. how do I disable bitlocker when I can't get past this screen?

Read other answers

The new 6th Gen X1 comes with a Bitlocker pre-encrypted C: partition. In order to create an image for safe-keeping as well as cloning I need to disable Bitlocker completely. The partition must be accessible from an external device. What I have found so far is that the only way to turn off Bitlocker is to supply it with the correct password / pass file.Now since the partition was factory-encrypted by Lenovo I am not in the posession of that key.My question is: Where must I apply or what do I have to do to get this key?

Read other answers

Hello guys! Please tell me how can i disable BitLocker in Windows 8.1 RT? I have't DISABLE BITLOCKER button in "Bitlocker
drive encryption".
I don't care about BitLocker Encryption, but sometime when i start my Lenovo Yoga 11, windows ask me about the BITLOCKER KEY... I HATE IT!!! I don't need it. So how can i DISABLE this?
Why i can't make my choice??? It's my device, but i can't manage it.. 

Read other answers

Is there a simple way to disable an OPAL SSD from self encrypting? I need to image a few hundred X380s and would like to use Bitlocker for encryption instead of relying on password prompts upon boot.

Read other answers

Hello, I recently bought a T470 (7th generation processor) for myself to do some college stuff on. After installing Ubuntu 16.04 as a dual boot and changing the Grub to make windows a priority in the bootoptions, Windows started to ask for the Encryption Key for the BitLocker everytime I try to boot into Windows. I have the standard Windows 10 home edition installed and can't find any options to disable the Bitlocker. I do not need the bitlocker since I dont have a lot of sensitive data to protect as a student. I also do not want to reinstall Windows because that would errase my programs and will not be benefitial for my deadlines. Is there any 'simple' way to get around this? To disable Bitlocker completely for example? I have found a lot of information about the TPM buit I can't see my solution in all of the topics that already have been made (I did a lot of pre-research beforehand of writing this topic) The only option I want to try is to erase the TPM in Windows (through tpm.msc) and to configure the bios to secure boot and UEFI only. But I don't want to try it if it will make my Windows un-usable. I can also change the Grub to what it was before in Ubuntu and see if that changes things, but I don't think it will help. Tried this, didn't work. Can anyone help me in this matter?

A:T470 can't disable bitlocker

Windows 10 home doesn't support bitlocker, so it won't have turn-on or turn-off options.

Read other 4 answers

I sent my laptop in for a service repair. It came back today and I had to enter a Bitlocker recovery key to get into my system.I thought this was a one time thing. However, every time I turn on my computer I get sent right back to the recovery key screen.I talked to tech support through chat and they said I'd have to send it back to service repair AFTER THEY ALREADY HAD IT FOR TWO WEEKS!How do I remove this step so that I don't have to enter a million numbers every time I want to use my laptop or send it back to service repair?

Read other answers

i don't use bitlocker

can i disable it ?
i mean disable from the right click ?


A:disable bitlocker shell integration ? can i do it?

If you want to get rid of it from context menu delete the following reg keys.
Remember to backup registry before you do.


Read other 4 answers

Hi Team,
Please help me on below queries.
1. If I disable Bitlocker through GPO will it automatically decrypt encrypted machines after next GPO update?

2. Can I disable bitlocker for particular set of machines? or particular AD domain?


Read other answers


i was hoping somebody could help me with removing bitlocker from windows?

i dont want to decrypt a drive, or stop bitlocker monitoring my drives because this wont actualy solve my problem. i actually want bitlocker to be removed and no longer exist as part of my operating system. i want it to die and burn in a fire of digital petrol

i'm not sure if its even possible really, i dont know how difficult or how important bitlocker is to the operating system itself when its not encrypting drives.

any ideas? if it cant be removed then i would be happy to just break it. delete a certain file that it relies on so when it tries to start up it just gives a windows error which i can cancel perhaps?

thanks in advance for any help.

A:Actualy remove bitlocker entirely, not disable

Best I can offer is the Bitlocker service is set to manual by default which means that it will be started if required. You could set this to disabled which should prevent it ever running.

Please note that if you disable the service the encryption will remain on any areas that are encrypted, and could actually corrupt the encryption making it impossible to recover data. With this in mind I would strongly advise against doing this, or at a minimum make sure that there are no encrypted files in use prior to any changes

Read other 7 answers

Our users are local admins on their computers and we would like to disable BitLocker.  Is there a way to disable Bitlocker via Group Policy?

Read other answers

hello there,

quick question... underlying all this metro stuff, is there still a stock/vanilla interface available somehow? when working on a desktop/laptop i really would love to stock notifications.. take the bitlocker dialogues for example.

i mean, i guess one can deal with it (like a boss!), it is definitely no dealbreaker. but still, it is ugly as ...

"old/clean" versus "metrofied"


A:How to disable Metro notifications (esp. Bitlocker)

Some system dialogs have changed in Windows 8, including "Open with", WU notifications, etc. There's no supported way to change this.

Read other 5 answers

Hi , 
I locked my external hard disk (Seagate- 1 TB) on Windows 7 laptop . The encryption was successful but when I later tried unlocking it, Its giving an error. Error
says "bitlocker drive encryption failed to recover from an abruptly terminated conversion". Please note that the Password and Recovery Key are correct and I have tried unlocking it
several times but no success.
Upon searching on internet, I came across the below thread which I yet need to try. Pray that it gets unlocked as I have got very important data locked up and the drive
volume is also 80-90% filled. 
Please help me out experts to get my data back.<o:p></o:p>

Read other answers

Had  a bit of a nasty surprise this morning when File Explorer showed my C partition with a bit yellow bang over it with an unlocked padlock behind it.  It turned out that either Lenonvo or Microsoft had decided that I needed to be encrypted, and just did it whether I wanted it or not.  The partition had already been encrypted, and it was now just waiting for me to set up a password or whatever.  So I finished activating the encryption and everything was fine.  Then I turned off encryption, and that worked too. For the moment I don't want to implement encryption.  Is there a GPE or registry entry that will disable this automatic encryption.  Or was that a one-shot thing that won't be repeated?  I want to be the one to decide if and when to turn on encryption.  If it matters, I do not have a Microsoft account. 

Read other answers

We have users with admin access on their respective laptops, how shall I disable an option of suspend and Turn Off for users with admin access on their laptops?

Read other answers

Hi There,

I am currently using Bitlocker to encrypt another partition of my computer, which I store all my personal and sensitive information. I don't want to use for the C: drive, but apparently it is its main purpose, as it keeps popping up a message reminding me
to encrypt my computer.
Is there a way to disable this message and keep using bitlocker for my oher volumes? Please, it is really annoying me..

Obs: Currently I am using a 64bit Windows 7 Enterprise Edition.

Read other answers

Initially I found that BitLocker on the Go supported removable media like flash drives and external drives. Why isn't a CD/DVD supported since it is considered removable media? Will this support be available in future releases?

A:Will BitLocker or BitLocker on the Go ever support CD/DVD encryption?

Bitlocker to Go is not supported on CD/DVD. Your suggestion is valuable, I will forward this information to the appropriate department through our internal channel.
Both the Microsoft Product Team and Development Team will take into consideration all suggestions and feedback for future releases.
Currently, you may need third party software to encrypt CD/DVD.
Best Regards,
 Niki Han
TechNet Community Support

Read other 3 answers

The organization I work for have been building ThinkPad L560 models for a while now using SCCM 2012 R2 and pulling down Windows 7 32-bit images over our network. The task sequence enables BitLocker on those L560 at the very end. During the setup of an L560 you have to go into the BIOS and select DISCRETE TPM option and then PXE over the network when settings are saved. All works OK. Recently we took delivery of a newer model we had never set up before ? an L570. The BIOS allows a 2 way choice for TPM which I gather from the user manual directs one to select TPM 1.2 for Windows 7 and TPM 2.0 for Windows 10. We are still dealing with Windows 7 so I chose TPM 1.2 in the BIOS and cleared the key and built the new model using PXE to SCCM servers and the laptop built and BitLocker is enabled and the finally built laptop looks OK. The problem comes when I do a restart ? it is looking for the entry of the BitLocker Recovery Key. Furthermore it is erratic in the asking for this entry ? sometimes it asks for it and sometimes it does not ? and it can be asked for on a simple warm restart or a power down and cold restart. Nobody is changing the BIOS so how does it think a change has taken place. I have also done the Suspend Protection followed a few minutes later by Resume Protection procedure but this does not make the problem go away. Here is what I see The system boot information has changed since BitLocker was enabled.You must supply a BitLocker recovery key to start thi... Read more

Read other answers

Hi everybody, I got a very strange problem which I was unable to solve yet: My ThinkPad Yoga won't work with BitLocker.After initiation of the "BitLocker system test", it boots to the blue "BitLocker screen" - still, the PIN which was set before is not accepted. After cancellation of the test, Windows 8 (Windows 8.1 Update 1) states that the test failed, because the TPM could not be written. While doing some troubleshooting, I recognized that BIOS states the TPM being in "MFG Mode" (= manufacturing mode?); this might be caused by a motherboard change done by the Lenovo service approx. 1 month ago. My question is:Does anybody know how to make the TPM leave "MFG mode" or any other solution to this problem? Thanks in advance!  Best regards, David  picture: sytem infos picture: TPM infos

A:ThinkPad Yoga - BitLocker- / TPM-problem

I noticed this when I had a Yoga returned from repair, the motherboard has been replaced twice, once to cure the original fault, the second time to try to get the chip out of Mfg Mode.The person I spoke to at the IBM hardware call centre hadn't come across this before.The yoga has been decrypted and encrypted again, and totally rebuilt.  In both cases the TPM chip seemed to work.I am trying to work out a way of testing the bitlocker is actually working, i.e. it will ask for a bitlocker key if it detects any interference.I am slightly worried that we are not able to clear the chip.Any input from Lenovo/IBM would be appreciated.

Read other 2 answers

Hello,  (This has happened on a couple of these new machines) Windows 10 Enterprise.Secure boot disabled, EUFI (both) Legacy firstHarddrive set to first boot devicePXE boot imaged (SCCM)I enabled bitlocker and setup the computer, AD environment, connected it to a dynadock finished machine config. Deployed it to user and a noticed shortly afterwards that upon startup it is asking for recovery key. I suspend/reboot and enabled bitlocker. Reboot asks again for the key. I messed with BIOS settings galore. Finally decrypted cleared keys, took ownership and prepared the TPM. It said it was ready to work but in reduced funtionality?Attempted to encrypt, did the Bitlocker system check, reboot and got the Bitlocker could not be enabled, the encryption key could not be obtained from the trusted platform module. Any advice would be much appreciated.JB 

Read other answers

When I try start my computer I get this blue screen:

STOP: c000021a {Fatal System Error}
The intial session process or system process terminated unexpectedly with a sta
tus of 0x00000000 (0xc0000001 0x00100a20).
The system has been shut down.

It will not boot in safe mode or safe mode with command prompt. It has BitLocker ecryption which I have the 48 number password that I have to enter every time I boot.

I would like to learn how to get to the command prompt somehow to disable BitLocker and try to fix a registry file I damaged while trying to fix a virus.

At the very least, I would like to try to backup my data onto a 1TB WD My Passport.

Any help with this would be GREATLY appreciated. I am not extremely computer saavy.

A:Getting to command prompt to disable bitlocker when comp won't boot

I've got the Windows Recovery Essentials disc running from NeoSmart. I can't access the hard drive to fix the registry files because of BitLocker. Anybody know EasyRE Command Line? How can I disable BitLocker through this command line? I have the BitLocker password.

Read other 4 answers

I have a T480 with a NVMe SSD running Windows 10 Pro.  I would like to encrypt the drive, so I turned on BitLocker.  It has a TPM chip, so I am not prompted for a password.  It enables fine, and I leave it on to finish the encryption, after returning to the machine it has rebooted itself and is stuck not being able to boot, without recognizing the SSD at all.  If I power the machine off and start again, it boots fine.  I login and bitlocker encryption is still in progress.  The process repeats several times until BitLocker finishes encyrption.  Occasionally there is a BSOD in the mix.  I'm not getting a lot of warm fuzzies about BitLocker at this point and am inclined to just turn it off until I can find a better solution.  Is this expected behavior or is there something I am missing? Thanks in advance,David

Read other answers

Dear Gents, I have tried to enable bitlocker as per guide at link https://www.windowscentral.com/how-use-bitlocker-encryption-windows-10I clicked wizard and enabled bitlocker on my system partition. There was not prompt to put my desired password, just reboot. My question is what password is used for bitlocker encryption and login? My windows logon one? Also another issue with TPM chip. I have version 1.2. I was required reset it what I did. Still I am surprised by what password is used during bitlocker encryption?Many thanks Regards Andy

Read other answers

Hello Friends

I just Re-Install WINDOWS 7 Ultimate on my HP G62 , when ever i try to unlock my USB flash drive it do not ask for password instead it ask for recovery key which i do no t have, How can i access to my files on the drive. I have password with me.


A:BitLocker Password

Hello yousafali, and welcome to Seven Forums.

You might see if you may be able to use step 2 in the tutorial below with your BitLocker password to recover your BitLocker drive.

BitLocker Repair Tool - Recover Drive in Windows 7 and 8

Hope this helps,

Read other 9 answers

Here's the problem -
I have a tablet that, when booted, immediately wants the Bitlocker password. The password was lost, so I go the web site to request it, and the email address domain no longer exists, so the password cannot be sent.
I cannot access anything other than the Bitlocker password screen, so how can I open this drive to do anything at all?

Read other answers

I use Windowa 10 and encrypted D drive with password. It asked to update several times so i begun to update. But it was not completed all over the day. Then I forcefully restarted the Laptop. As a result the windows crashed. Then I formatted the C drive
only. After formatting i  tried to unlock D drive but it says incorrect password when i put the correct password. Mistakenly the recovery key also stored in C drive. I lost the recovery key but not password. How do i open the drive? 
Reply me please. I am in real trouble.

Read other answers

I have seen this question asked elsewhere several times, but with different answers...so I just want to make sure my understanding of BitLocker is correct.

In the past, I had used BitLocker on several computers that did Not have a TPM...therefore I had to use a strong 30/40/50+ character password, which was not a problem. I am now working with a new computer that came with a TPM installed...so now instead of a long password, I am restricted to a maximum of 20 characters (even with enhanced PIN's enabled, it still only lets you use 20 characters, which I'm not sure why 20 is the limit?)

From my understanding, even though it is a much shorter PIN, it is more secure than a long password because the TPM only allows up to 32 attempts before locking out...and then lets 1 more attempt every 2 hours...thereby allowing only just over 4,000 attempts per year (according to both basic math as well as a Microsoft article). Thereby making brute forcing the PIN pretty much impossible even if you use just a 6 digit number.

In addition, if you put the hard drive in another computer, the PIN won't work...you would now need to use the recovery key/recovery password...which is also impractical to brute force.

Is my understating pretty much correct? Or am I missing anything? At first it would seem a 50 character password is more secure than a 6 digit PIN number, but after reviewing everything, it seems that the TPM makes the PIN 'stronger' than the password? Is there any benefit to turning ... Read more

A:Bitlocker...TPM + PIN vs Password?


Read other 1 answers

We want to Disable Startup Repairs on all Windows 7 computers with BitLocker Enabled. Because we have thousands of computers out there, we would like to avoid BitLocker from asking for Recovery Password upon restart & detecting there are changes made on the BIOS.
Disable Startup Repair will be pushed via a gpo startup script.

We tried manage-bde -off C: -- however, it does not fit the purpose as it took times to decrypt C: and when we turned BitLocker back on manage-bde -On C:, BitLocker is asking for Recovery Password key.

Is there a way to achieve for BitLocker machine not asking for Recovery Password when detect a change on BIOS? and can that be achieve via GPO/SCCM?

Thank you

Read other answers

I am using W10 Pro on a Dell computer. I selected BitLocker and followed the prompts and it encrypted my C: drive. At no time did it give the option to setup a password. How do I do that? It would seem an encryption is useless without password protection.

A:BitLocker, no password setup

Read other 6 answers

I am having a HDD with bit-locker encryption protected. My laptop motherboard gone faulty, Now i am trying to attach the HDD externally but it's not accepting the password at all. Please help me how i can access my data, the data is very important to me.
Also I lost my recovery key because i forget to store the key anywhere at the time of encryption.

Damodar Mahajan

Read other answers

A CI is deployed to workstations to enable bitlocker. Many desktops are asking for recovery password. Many workstations are encrypted successfully.
how to troubleshoot the reason for desktops which are prompting for recovery password. 

Read other answers

i have a problem that i lock my D drive by bitlocker. window unlock drive by password but can not remove permanently
i want remove it permanently \ can any body help me
[email protected]

A:Bitlocker remove password

To turn off BitLocker Drive Encryption
1. Click Start, click Control Panel, click System and Security, and then click BitLocker Drive Encryption.
2. Find the drive on which you want BitLocker Drive Encryption turned off, and click Turn Off BitLocker.
3. A message is displayed, informing you that the drive will be decrypted and that decryption may take some time. Click Decrypt the drive to continue and turn off BitLocker on the drive.
By completing this procedure, you have decrypted the drive and removed BitLocker protection.
http://technet.microsoft.com/en-us/library/ee424315(v=ws.10).aspxTracy Cai
TechNet Community Support

Read other 9 answers