Security :: BitLocker Requiring Key Every Time On Boot Up
Jan 1, 2014
After I restored to default settings in the bios , I get into this problem of bitlocker requiring the key to start. I tried to suspend bit locker but bit locker management is not available . OS is win 8.1 , product is Dell Venue Pro 11 Tablet.
When I tried to use elevated command to disable bitlocker , the system does not recognize "protectors" in the command line.
What am I to do? I am sick of entering the very long Key , each time I bootup ...
I have Windows 8.1 Core and Enterprise dual booted. Now, the real question here is, well I've read online that Windows 8.1 had finally added some of the encryption functionality of Bitlocker in a limited sense setup and turned on by default in all editions of Windows including Core - similar to how it does this with RT. The thing is on that point I've read about this, but no-one on the internet seems to know how to describe this functionality with more detail than just a mention of the existence of this.
Yes, I know Windows 8.1 is a brand new OS - so new that it won't be available to the normal public for another month and a half. And yes, I know, this RTM is still incomplete and when it will be complete within this next month and half maybe some of these new features (like the default limited Bitlocker as well as the Wifi hotspot functionality (which I figured out how to setup with Powershell, but there's no easy and normal way to go about doing this (how are normal people going to set it up? Normal people are afraid of Powershell/Command Prompt! Microsoft knows this - so I assume they'll address these concerns, and if they don't - there employees and executives must be smoking crack cocaine))).
But, what I'm getting at is this - is it safe for me to set up Bitlocker on the Enterprise edition/drive and let the Core edition/drive be as it is now? Is there a specific way I should go about doing this? If my concern on this is warranted - and it's a dangerous thing to try to do - which could have negative and unwanted consequences - than maybe I should just remove Enterprise, well if I should, then suggest that too. I like Bitlocker encryption for my more sensitive data - but I also like this Windows To Go feature as well. I would remove Enterprise if it's probably the best option. I am concerned of this too because I remember reading years ago that in reality having a dual boot setup of 2 editions of the same version of Windows (or just 2 editions of different versions) was/is actually something that isn't a good idea to have setup because it messes with the 2 versions of Windows somehow and drive C:, but I assume that as time has passed and technology has advanced maybe those issues that were authentic issues in the past might've been addressed with the new technology - but am unsure of this.
So, basically, the real question is - is dual booting these 2 editions of Windows safe in the new world of today with these new technologies - and if it is - is having the full Bitlocker functionality with Enterprise setup and having the Core OS setup as the main OS as well - safe?
I activated Bitlocker for my Operating system drive on a Windows 8 machine. But when starting the process I only can back up the recovery key. I have no dialog to choose how to unlock the drive. Thus even though Bitlocker is running, the PC can be turned and windows can be accessed by common user authentication. No password prompt appears at an early instant of the boot-process.
I recently upgraded my windows 8.1 to windows 8.1 pro as I wanted to enable bitlocker encryption on the laptop.
The issue is that I can't seem to enable or find bitlocker in any of the area's outlined. When I try to right click on the C: drive I don't have an option for bitlocker. When I go into control panel, there's no bitlocker icon. When I do a search on the machine for bitlocker I do get a "manage bitlocker" icon, but it's doesn't do anything when I click on it.
I have followed the tutorial on this site and downloaded/installed the reg files to enable it on a non tpm device. Can see that they did update the policy on the machine, but still no joy.
When I go into PC info on the machine in question I don't see anything about bitlocker. It's like it's not there. Do you have to add a windows feature to enable it?
We are facing an issue with bitlocker on Windows 8 machines since its not encrypting Hard disks through GPO. we are getting the below error on the log files
failed to initiate drive encryption with the following exit code: 80070057
We are using the same GPO for windows 7 machines and its working completely fine and also Bitlcoker_to_go is working fine with both OS's.
Is there anything specific in GPO to check for bitlocker encryption in windows 8?
I am "fresh" with BitLocker encryption. I need to encrpyt OS drive of laptop with Windows 8.1 and TPM chip. I have read few articles about encryption of OS drives with BitLocker ( with TPM / without TPM ) but never got a direct answer to my questions. So ... I want to ask:
1. Is it possible to encrypt the drive without using the TPM in case that there is TPM chip in the laptop because from what I have read BitLocker work with TPM by default but I don't want to use it. I have had already encrypt other laptops without TPM chips by setting up the group policies ( Computer Configuration Administrative Templates Windows Components Bit Locker Drive Encryption Operating System Drives and double click on Require additional authentication at startup ) and ... is it possible something like this to be made in this case ( when the laptop have TPM in it ).
What I want is the user to be asked for password on startup, recovery key to be saved to a file on external device( not to use usb flash drive as a key ) and to be possible simply to change my HDD in the future without need to manage TPM.
If this is not possible ... here is my second question:
2. Can I setup encryption with TPM like that: - user to be asked for PASSWORD on startup - recovery key to be saved to a file ( I don't want every time to use usb flash drive with recovery on it to unlock the drive ... what I want is just user to be asked for a password and when he enter the correct password the drive to be unlocked ).
I have a new Windows 8.1 machine and I wish to encrypt the drive using Bitlocker. It gives me 4 options to save a recovery key
1. Save to your Microsoft account 2. Save to a USB flash drive 3. Save to a file 4. Print the recovery key
Option 1 isn't available as I'm logged on using a local account.
i. What is the difference between options 2 & 3? i.e. I could save to a file on a USB drive ii. Does option 2 mean the USB flash drive cannot then be used for other purposes? iii. Does option 2 also mean I could use a USB external hard drive, or does it have to be a flash drive? iv. Once the recovery key has been created, can the key then be copied to other locations or is it only going to work where Bitlocker puts the key? v. Just thinking about printing the recovery key - can this be used without a password to access the drive, how sensitive/important is the printed key?
I have BitLocker enabled on a laptop's boot/OS drive. It has worked well for almost a year but it hung when shutting down the other day and I had to press and hold the power button for 4 seconds to power it off. Now when I power it back on, it asks for the password as normal but then it starts in recovery mode and asks for the recovery key as well. Unfortunately I do not have the recovery key.
I know that the password I am entering is correct because it rejects any other password (as would be expected) and only prompts for the recovery key when I enter the correct password.
Am I going to be able to recover my data without this recovery key it is asking for?
My issue first originates with going through the windows 8.1 store app to upgrade windows 8 -> to windows 8.1.
"turn off bitlocker because it isn't supported in the edition of windows you want to install"
I am not sure whether i encrypted the drives after installing windows 8 or in windows 7, nevertheless i do know the encryption passwords to the drives. The biggest problem is therefore trying to remove/disable the encryption to upgrade.
The Applet in the control panel is missing for some reason. I have seen some guides which rely on this applet which is usually situated between auto play and colour management.
I would like to remove/disable the encryption for the upgrade, or confirm the idea that if i disconnect the two drives that are encrypted i could upgrade the OS to 8.1 and wouldn't need to worry about the encryption. The concern is that the 8.1 OS would not read the drives hence the upgrading message.
My specs are this , related to Bitlocker:
Windows 8 64bit - standard (non-enterprise, pro)Hard drives:1 X 128GB SSD - C:/ windows installed here ** NOT ENCRYPTED **1 X 2TB HDD - D:/ + E:/ **ENCRYPTED**1 X 3TB HDD - F:/ **ENCRYPTED**
I've recently encrypted my main drive, and all is well. However, I would like to be able to encrypt one of my data drives as well and bitlocker isn't even detecting the drive's existence under "Fixed Drives"
I'm on windows 8.1 machine, the encrypted main drive is a SSD drive, and the data drive is a regular WD spinning drive SATA drive. I would like to have the WD data drive encrypted as well...
I'm seeking full-disk encryption software. I want to encrypt the volume that my Windows installation is on.
First of all, does Bitlocker come on the home edition of Windows 8.1? I recall on previous versions it was only available in the Pro editions.
However, I would prefer to use an open-source disk encryption solution. I've searched but I have not found any that can encryption the Windows installation volume, the ones I found (such as TrueCrypt) can only set up additional encrypted partitions which is no good for me.
I have a Microsoft Surface Pro 2 and I am running Windows 8.1 Pro Update 1.
I have been unsuccessful at building a WinPE image that provides BitLocker support. I searched around the internet and found many posts. Eventually, I ended up trying to build it with the various added packages I discovered in the various posts. However, in the end, none worked and this is the message I am getting after booting into my WinPE environment:
manage-bde.exe - Application Error
The instruction at 0xa20afa3b referenced memory at 0x0000013d. The memory could not be read. Click on OK to terminate the program
Here are the commands I eventually ended up using to build my WinPE image:
I have a Windows 8 Pro laptop with a single SSD. I just encrypted the entire drive using Bitlocker. The process prompted me to save the recovery key, which I did to an external drive. The encryption was successful but nowhere during the process was I prompted to choose a password. So I have the drive encrypted but when I reboot it does so normally without asking me for a key or password to access the drive.
Recently upgraded to Windows OS 8.1 Pro and cannot encrypt my HP external hard drive. Encryption pauses and states that disk has errors and please run chkdsk. Ran chkdsk and no errors found. Had no difficulty encrypting the C drive with the OS.
I turned on Bitlocker on three new Windows 8.1 laptops and saved the 48-digit recovery keys and associated identifiers, but I forgot to indicate which laptops they are associated with. Is there any way to find the identifiers/recovery keys on my laptops so I can document this? Or do I have to decrypt the laptop drives, turn off Bitlocker, and start all over again to generate new identifiers/recovery keys? My only options under Manage Bitlocker are Suspend protection, Back up your recovery key, and Turn off BitLocker.
I've started recently having issues with my Asus laptop (model x550c). It all began with couple of BSOD, that were referring to hardware error, but as they occurred when I witched WIFI I figured it was driver related, re-installed driver, and they went away.
Fast forward a few days, now computer just randomly (what I can see) freezes, with image and everything left, and nothing happens till I reboot by taking battery out (I can't move mouse, or do anything at all). I've also had issues starting PC up from the Windows 8 hybrid shutdown, with nothing but black screen greeting me leading to same battery reboot.
Memtest seemingly came back okay (although I'll let it turn bit longer once I'm home), drivers seems up to date, no new software been installed recently, antivirus scan came back clean. Nothing seems abnormal with GPU/CPU load or temp. Chkdsk fixed some minor issues after first bsod, but freezes continued.
I am attaching the last minidump file, that seems to be pointing at hal.dll as cause, as well as the SF info. However, I can't save event viewer logs however, as it gives "The specified channel could not be found" error, so I had to manually export all critical and errors events in three separate files you can find in the events archive.
I just installed Windows 8 as an update from Windows 7. After the installation I chose a background color, I set a password and after that there was a black screen. I was able to move the mouse around and after 20 minutes I rebooted. However, it shows the black screen within two seconds, nothing works. I have tried to boot into safe mode but also that doesn't work.
I have an Asus R500V Intel core i5 3210M, 2.5 GHz nVidia Geforce 610M 2 GB 4 GB memory
I read something about there being a problem with the nVidia drivers, however I can't find a solution that works because I can't boot into safe mode.
I build computers for people. And after I install Windows 8.1 I want to install the drivers and set it to run first time boot again so my customers can customize it. I could do it on XP.
I'm running Windows 8.1 Pro x64. I just began to get an Event ID 1 in my event log at boot time. It's only a warning and can probably be ignored it but curious minds like to know what is causing it and possibly how to fix it. Here's all the specifics as recorded in my event log:
The backing-file for the real-time session "DiagLog" has reached its maximum size. As a result, new events will not be logged to this session until space becomes available. This error is often caused by starting a trace session in real-time mode without having any real-time consumers.
I am thinking of replacing my HDD with an SSD in my laptop. My HDD currently makes a clicking noise at random times and I think it might be dying, so I want to be proactive. I plan on buying an SSD and cloning my HDD to it. I have many programs that require a license/key to use (mainly concerned with ArcGIS). After I make the switch, will my subscriptions still be active and ready to use? Other programs I was thinking of were Microsoft Office and antivirus.
X230 Laptop, 8GB RAM, Intel Graphics 4000 series, SS180GB SSD. Problem occurs with laptop in the Ultra Base Series 3 dock or out of it. - VGA or DisplayPort. Laptop came with Windows 7, was upgraded to Windows 8 and then Windows 8.1 and then the 8.1 update. Problem started when Windows 8.1 was initially installed.
When connected to an external Monitor (HP ZR2240W or a Dell 2412Mb) with either display port or VGA (VGA on Dell only), Windows Explorer will stop working, open programs will show not responding. Mouse still functional, and if cursor is placed in the "taskbar" area, you will get a blue spinning circle. A double click of the mouse in that area will generally cause a relaunch of Windows Explorer (screen area goes blue, then repopulates with the icons) and things will work fine for a number of program launchs or switching between programs, then the problem will occur again. This will happen up to 20+ times per day.
Laptop has the latest BIOS installed from Lenovo, Intel Graphics Driver 10.18.10.3621. Have tried three different keyboard and mouse options (Microsoft wireless keyboard and mouse, Logitech wireless keyboard and mouse, and a hard wired keyboard and mouse) and problem follows each. Friday I reloaded Windows 8.1 with the most recent updates and problem continues.
Additional information - 65Watt Lenovo Power Supply. Laptop when not connected to external monitor (using just laptop screen) does not exhibit same problem
I feel that it might be a graphics adapter (Intel 4000) problem. Only solution there is a motherboard replacement.
I have just updated my laptop to Windows 8.1, it now takes about 3/4 minutes to load after entering my password, all I get is a blank screen for all that time before I see the desktop.
I've recently installed a dual boot, Windows 7 and Windows 8. The installation went fine but then after a very short time my Windows 8 Screen goes black. I had to press the power button to exit. When again rebooting into Windows 8 the "blue window" shows and the spinner goes around for about 20 seconds, then all goes black.
I've checked the Power settings and ensured the "Turn off display" was "never". I also updated my Video drivers thinking that might be the problem. Both to no avail. I've done a "Refresh" and a "Reset (which took 3 hrs). Again, all was fine for a short time, but while exploring the OS, again the black screen. What else I could try to fix this Windows 8 problem.
I have a custom built computer running Windows 8.1 64-bit. Recently, it stopped going to sleep on it's own (except the first time that the power plan is followed after boot). Otherwise, the monitor goes to sleep and that is it. After a bunch of other attempts and fixes, I have found that there is a driver that is blatantly disregarding powercfg settings (as seen here: [URL] .....). This has been going on for over a week. I have run sfc /scannow, and dism /online /cleanup-image /restorehealth with no luck.
I have installed Win 8 on a slave HDD. Every time I boot to Win 8 my dual boot screen is gone,also Win 7 activation. Then it boots directly to Win 7. To go back to Win 8 I have to use EasyBCD. Once in Win 8....activation for Win 7 gone again ....
When I boot or reboot my PC, it is a slow process, the time with the blue window and the spinning circle is only about 5 seconds, but then there is a pause of 30-35 seconds where absolutely nothing is going on. Black screen, no activity at the SSD or at the net. After this my USB mouse and keyboards wake up, and only a few seconds later my PC is running normally.
I have allways (in windows 8) had that black screen, but only for a few seconds. After Windows 8.1 this "dead screen" just getting longer and longer. I have had it for some times, but I used to use Intel Rapid Start, so I did not care. Now I got som faster ram, and Intel Rapid Start don't work with this ram, so now I have to boot every time, and now I'm not so happy with this long pause in boot.
What is Windows 8 doing in this time? How to eliminate it (or just get it reduced)?
