Drive encryption - Unlock on logon

UnworthyBean · 6 Sep 2018 at 15:55

Looking to turn on bitlocker on my pc, but it's currently used headless 90% of the time and does get shutdown after use. Problem with bitlocker is in order to get drives to automatically unlock, the system drive needs to be encrypted too. Not a massive problem, but this requires the password to be entered before it even gets to Windows so can't really use it headless.

I don't need the system drive encrypted, just the few data drives, but need them to automatically unlock with Windows. Anyone know if this is possible?

netdps · 6 Sep 2018 at 16:30

you dont need the password if you use a usb access key if i remember correctly (make sure you back up your recovery key!)

UnworthyBean · 6 Sep 2018 at 19:44

Sort of leaves me in the same scenario unfortunately. Would have to plug the usb drive in to access the computer.

Might be slightly easier than typing in the password each time but still a pain. Also means when I shut the computer down, going and removing the drive.

andshrew · 6 Sep 2018 at 22:02

You could use the manage-bde command to unlock the data drives, for example via a scheduled task to run after you log in.

Run 'manage-bde -unlock -?' for examples of how to use the command.

Raumarik · 6 Sep 2018 at 23:22

Does your motherboard support a TPM? if it does you can link it and it won't prompt for a password as long as there are no hardware changes.

SupraWez · 6 Sep 2018 at 23:26

If bitlocker doesnt work how you want it have you checked TrueCrypt or its replacement VeraCrypt?

You can encrypt the boot drive, individual drives, removable drives or create encrypted volumes which can be moved around like any other file and then mounted as a drive etc, its also cross platform.