Hi all, because of a unexpected activation of the BitLocker issue in my yoga book after an update, I have following situation. I can log-in because I've no recovery key for BitLocker (It's a Windows acount issue and an other story). Because no recovery key I can not reset my book to it's factory settings. No Window 10 Recovery Setting, and No BIOS 'System Recovery' are possible any more. Is there a third option to reset the yoga book to it's very original version?
Jan 14, 2019 - BitLocker is a tool included in Windows 10 (Pro and Enterprise), Windows 7 (Enterprise and Ultimate), and Windows 8.1 (Pro and Enterprise).
Or any other suggestions how to deal with this issue? Cheers sonja.
You can use Drive Encryption to help protect your files on an entire drive. BitLocker can help block hackers from accessing the system files they rely on to discover your password, or from accessing your drive by physically removing it from your PC and installing it in a different one. You can still sign in to Windows and use your files as you normally would.
New files are automatically encrypted when you add them to a drive that uses BitLocker. However, if you copy these files to another drive or a different PC, they're automatically decrypted. BitLocker can encrypt the drive Windows is installed on (the operating system drive) as well as (such as internal hard drives). You can also use BitLocker To Go to help protect all files stored on a (such as an external hard drive or USB flash drive). BitLocker checks the PC during startup for any conditions that could represent a security risk (for example, a change to the BIOS software that starts the operating system when you turn on your PC, or changes to any startup files). If a potential security risk is detected, BitLocker will lock the operating system drive and you'll need a special BitLocker recovery key to unlock it.
You can choose how to unlock the operating system drive when you turn on your PC with a (requires ), password, or startup key on a connected USB flash drive. This tutorial will show you how to turn on or off BitLocker to encrypt or decrypt operating system drives with or without a in Windows 10.
Microsoft is aware of reports of vulnerabilities in the hardware encryption of certain self-encrypting drives (SEDs). Customers concerned about this issue should consider using the software only encryption provided by BitLocker Drive Encryptionâ„¢. On Windows computers with self-encrypting drives, BitLocker Drive Encryptionâ„¢ manages encryption and will use hardware encryption by default. Administrators who want to force software encryption on computers with self-encrypting drives can accomplish this by deploying a Group Policy to override the default behavior. Windows will consult Group Policy to enforce software encryption only at the time of enabling BitLocker. CONTENTS:. To Turn On BitLocker for Operating System Drive in BitLocker Manager.
To Turn Off BitLocker for Operating System Drive in BitLocker Manager. To Turn Off BitLocker for Operating System Drive in Command Prompt.
To Turn Off BitLocker for a Operating System Drive in PowerShell EXAMPLE: Enter password or PIN (TPM) at startup to unlock OS drive encrypted by BitLocker. This option requires that your PC has a chip on it. On a PC with a compatible TPM, four types of authentication methods can be used at startup to provide added protection for encrypted data. When the PC starts, it can use only the TPM for authentication, or it can also require insertion of a USB flash drive containing a startup key, the entry of a 4-digit to 20-digit PIN, or both.
Starting with Windows 10 1703, the minimum length for the BitLocker PIN was increased to 6 characters to better align with other Windows features that leverage, including Windows Hello. To help organizations with the transition, beginning with Windows 10 version 1709 and Windows 10 version 1703 with the October 2017 installed, the BitLocker PIN length is 6 characters by default, but it can be reduced to 4 characters. If the minimum PIN length is reduced from the default of six characters, then the TPM 2.0 lockout period will be extended. Hello lx07,:) I recommended step 14 in OPTION ONE because of what's in the red warning box under that step. Too many people, including myself, had the computer no longer be able to boot into Windows if selected to do the check, and I ended up having to reinstall Windows because it couldn't unlock the OS drive even with the recovery key. The odd thing is that it's not suppose to be encrypted yet, but is still locked out. When not using the check, BitLocker proceeded and worked fine.
I'm not sure if it's an UEFI issue or what yet causing that, so I added that as a precaution to help others avoid the same. Following advice on another thread I attempted a clean install of Windows 10 as my HDD had become fragmented with numerous spurious partitions that were eating up space unnecessarily. The process went well until Windows created the four partitions and I tried to install Windows on Drive 0 Partition 4, when Windows gave a message: 'Windows can't be installed on Drive 0 Partition 4. Bitlocker Drive Encryption is enabled on the selected partition. Suspend Bitlocker in the Control Panel then restart installation.' I had no idea that the HDD was locked with Bitlocker and the Clean Install tutorial on the forum gave no warning that this could be a problem.
As Windows and the Recovery partitions have been deleted this is not an option. How can I solve this and get Windows reinstalled short of replacing the HDD? Hello Exspextations,:) You should be able to delete all partitions on the disk at boot during Windows Setup to do a clean install of Windows 10 on the disk even if it was encrypted with BitLocker.
When you delete or format a disk, it removes BitLocker protection.Umm. If that is the case, not sure what happened when I did this then, but I have managed to get round the problem as follows: After setting my Bios to legacy boot I was able to boot from the USB recovery disk. However when I ran the install I still had the Bitlocker problem after deleting all the partitions. As I had nothing to loose, after deleting all the partitions created on the previous attempt to install Windows I clicked the 'new' button which created a 500 MB Drive 0 Partition 1: System Reserved partition and a Drive 0 Partion 2, which when selected allowed me to proceed and successfully install Windows.
However, this was not the 4 partition configuration that the Windows installation is supposed to have so I decided to do a fresh clean install after deleting the two partitions to obtain the required configuration. This produced the same 2 partition configuration rather than the 450 recovery partition, 100 MB EFI system partition and 16 MB MSR partition with the rest as the C: drive. Not sure why my installation is different or why it is different from that expected, but at least it works. One final question: Bitlocker is not shown in the control panel of Window 10 an doesn't appear to be a function of WIndows 10 Home - so not sure why my disk was encrypted in the first place, but should I encrypt the C: drive after the clean install?