7 Posts
0
1055
March 16th, 2022 14:00
Are files BitLocker encrypted or not on Win 10 Pro clean install on Inspiron 15 3511, and how to unlock them
I’m having my first experience with BitLocker on a new Inspiron 15 3511. This was originally loaded with Windows 11 Home, but as this did not fit my needs, I cleanly loaded retail Windows 10 Pro to a blank 1 TB SSD. In the process of creating partitions, I recall no option for enabling or disabling BitLocker.
The drive is now fully loaded, and I was going to use Acronis TrueImage /CyberProtect 2021 from a USB flash drive to image the Recovery Partition (509 MB), EFI System Partition (100 MB), and C: Partitions (250 GB). When attempting to do so I, got an error that C: Partition (along with and E:) are BitLocker Encrypted, and they need to be de-encrypted before imaging.
I have read Dell Article # 000125409 (How to Enable or Disable BitLocker with TPM in Windows) which is not particularly helpful as I am unsure about where my "starting point" is (seeing as I did not intentionally encrypt this on my own - was I forced into this by the UEFI BIOS Settings, Windows 10 installation procedure, or both?).
What I know is:
From the TPM Management Snap-in “Status – TPM is ready for use”.
From the Computer Management/Storage Snap-in that C:, and E: are listed as “NTFS (BitLocker Encrypted)
From the Control Panel -> BitLocker Drive Encryption, each drive is listed as “DRIVE_C (C:) BitLocker Off” (same for and E:). To the left of the listing, in small letters, is “Turn on BitLocker”.
This makes no sense to me – in one place it says the drives are Encrypted (and Acronis says this as well), and the other place that the Drives that BitLocker is “Off”.
Is there some kind of Intermediate state? Certainly I have seen nothing about BitLocker Encryption Keys to either lock or unlock the files.
The last thing I want to do is “mess this up” wasting hours of configuration in crashed/corrupted files.
Any thoughts? And thanks in advance.
Computer Management-> Storage
TPM Management
BitLocker Status
0 events found
wlsalomon
7 Posts
0
March 19th, 2022 17:00
Problem solved!
The easiest way to see what the status of Bit-Locker is to use the Command Line to enter...
1. > manage-bde -status this gave the status of all 3 drives as "encrypted" but fortunately none were locked.
Having determined that, I entered.
2. > manage-bde -off C:
3. > manage-bde -off ...
4. > manage-bde -off E:
This turned off BitLocker encryption for each drive. Note that his is an "asynchronous process" through the Trusted Platform Module that does not report back to the Command Line that the process is complete. Hence to make sure each disk partition is done, you will need to enter > manage-bde -status to make sure the disk decryption has finished (this make take several times as you see the "Encryption %" decrease to 0. Then you can start decryption for the next partition
Having done done that, I entered
5. > manage-bde -status again and all 3 drives were decrypted.
It is helpful to run
> manage-bde -help and/or > manage-bde /? to get the syntax with switches and parameters.
Note also that there is a PowerShell equivalent -
> Get-BitLockerVolume for status and
> Disable-BitLocker -MountPoint C:
> Disable-BitLocker -MountPoint ...
> Disable-BitLocker -MountPoint E:
and a final status check of
> Get-BitLockerVolume
(The ellipses above are because the editor refuses to take "D:")
nyc10036
4 Operator
•
5.6K Posts
0
March 19th, 2022 18:00
Are you saying that you removed the original hard drive, then installed the new SSD, then installed Windows 10 Pro and ended up with BitLocker?
nareshmeena
8 Posts
0
March 20th, 2022 09:00
i hope you have made the microsoft account ,if their is any microsoft account then bitlocker key automatically backup to your microsoft account
go to this link
""https://account.microsoft.com/devices/recoverykey?refd=support.microsoft.com""