Turn On BitLocker for Windows 10 Operating System Drives without TPM

Download PC Repair Tool to quickly observe & fix Windows errors automatically

You can choose how to unlock the operating system drive when you turn on your PC with a PIN (requires TPM), Password, or a Startup key on a connected USB flash bulldoze. In this mail service, we will show you how to turn on or off BitLocker to encrypt or decrypt operating organisation drives without a TPM in Windows 10.

Plough On BitLocker for Windows 10 Operating System Drives without TPM

Assuasive BitLocker without a TPM volition require to unlock the operating system drive at startup with either a password or startup key on a USB wink drive. This option is used when y'all don't want to use or take a TPM chip on your PC.

1] Open the Local Group Policy Editor and navigate to this setting-

Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.

On the right pane of Operating System Drives double-click Require boosted authentication at startup policy to edit it.

This policy setting allows you to control whether the BitLocker Drive Encryption setup sorcerer volition be able to set an additional hallmark method that is required each time the figurer starts. This policy setting is applied when you lot plough on BitLocker.

This policy is but applicable to computers running Windows Server 2008 or Windows Vista.

On a computer with a uniform Trusted Platform Module (TPM), 2 authentication methods can be used at startup to provide added protection for encrypted information. When the computer starts, it can crave users to insert a USB flash bulldoze containing a startup cardinal. It tin also require users to enter a 4-digit to 20-digit startup personal identification number (Pin).

A USB wink drive containing a startup key is needed on computers without a compatible TPM. Without a TPM, BitLocker-encrypted data is protected solely by the cardinal material on this USB wink drive.

If you enable this policy setting, the wizard will display the folio to allow the user to configure avant-garde startup options for BitLocker. You tin can farther configure setting options for computers with and without a TPM.

If you disable or do not configure this policy setting, the BitLocker setup wizard will brandish basic steps that allow users to turn on BitLocker on computers with a TPM. In this basic wizard, no additional startup key or startup Pivot can be configured.

SelectEnabled at the top, check the Allow BitLocker without a compatible TPM (requires a countersign or a startup key on a USB flash drive) box under Options.

You lot can now go out Group Policy editor and keep to Step 2 below.

2] Launch File Explorer, right-click the operating system drive that you want to encrypt, and click Turn on BitLocker.

Choose how (USB or Password) you desire to unlock the operating organization bulldoze at startup.

You take two options:

Insert USB flash drive – This choice allows you to unlock the operating system drive with a connected USB flash drive with the startup cardinal saved on information technology.
Enter a password – This option allows you to unlock the operating organisation drive with a password.

At present, select how (Microsoft account,USB,file, and/orprint) you want to back upward your BitLocker recovery key for this drive, and clickNext.

The Microsoft account selection is only available when you are signed in to Windows ten with a Microsoft account. Information technology will save the BitLocker recovery central to your OneDrive account online.

Select the radio push button for how much of your bulldoze to encrypt (Encrypt unabridged drive is recommended), and clickNext.

Now, select the radio push button for which encryption mode [New encryption mode (XTS-AES 128-bit) orCompatible mode (AES-CBC 128-bit)] to use, and clickNext.

In the next window, uncheck or check (recommended) the Run BitLocker system check box for what yous want, and click Go along when fix to start encrypting.

The operating system drive will now start encrypting.

When encryption completes, click on Close.

Turn Off BitLocker for Windows 10 Operating System Drives with/without TPM

Whether you encryped your Windows Bone drives with a PIN (TPM) or with a countersign(without TPM), the procedure to decrypt is the same for both cases.

To turn Off BitLocker for Windows 10 Operating System Drives

Open an elevated command prompt, type the command below into the elevated command prompt, and striking Enter.

manage-bde -off <drive alphabetic character>

Substitute <drive alphabetic character> in the control to a higher place with the actual drive letter of the encrypted bulldoze you desire to decrypt. For case:

manage-bde -off C:

Having washed this, you lot can check the status of BitLocker for the drive at anytime.

Thus yous tin turn on/off BitLocker for Windows 10 Operating System Drives with/without TPM.

Obinna Onwusobalu, has studied Information & Communication Technology and is a keen follower of the Windows ecosystem. He runs a computer software clinic. He says it'south all-time practice to create a Organisation Restore Point earlier making whatever changes to your PC.