Questions tagged [bitlocker]

full disk encryption feature included with select editions of Windows Vista and later

BitLocker (codenamed Cornerstone and formerly known as Secure Startup) is a full disk encryption feature included with select editions of Windows Vista and later. It is designed to protect data by providing encryption for entire volumes.

139 questions
13
votes
4 answers

Launching docker for windows throws "Deny write access to fixed drives not protected by Bitlocker"

We recently had our hard drive encrypted and I am unable to use Docker for windows from then. Every time I launch Docker for windows I get the below error, "Current operation failed because Windows policy "Deny write access to fixed drives not…
makil
  • 489
  • 2
  • 7
  • 19
9
votes
2 answers

Detect BitLocker programmatically from c# without admin

From various threads I've cobbled together how to check for BitLocker programmatically like this: private void TestBitLockerMenuItem_Click(object sender, RoutedEventArgs e) { var path=new…
Kevin Donn
  • 528
  • 1
  • 4
  • 12
4
votes
1 answer

Running cmd from absolute path has it fail to recognise manage-bde command

I'm trying to use cmd.exe through AutoIt script. When I run(c:\windows\system32\cmd.exe) and try to launch manage-bde the error is not recognized as an internal or external command, operable program or batch file is coming. run(cmd.exe),…
user10057923
  • 43
  • 1
  • 3
3
votes
1 answer

c# Bitlocker enter password programmatically

I have a disk encrypted with Windows BitLocker. How can I unlock the drive with the password I enter in Winforms. If I can achieve this, I will be able to use the documents on the encrypted drive in Winforms. I tried the steps at this address, but I…
3
votes
2 answers

Getting over a 426 upgrade required

I've been working on a web app (front Angular, back Node/Express/Mongo) for a few months now. I run Angular on localhost:4200 and Node on localhost:3000 Some people in our team are running the backend in a VM that runs on their computers. So that…
gyc
  • 4,300
  • 5
  • 32
  • 54
3
votes
0 answers

TPM - Put my own private & public key inside the tpm

In the TPM I can generate an SRK (Storage Root Key) that will be stored on the chip. This key will be used to wrap and protect other keys (not stored on the TPM). Let's say I don't trust the chip in the key generation process, is there any way to…
b3nj1
  • 667
  • 1
  • 6
  • 17
3
votes
2 answers

Powershell script to check Bitlocker Status and email if Off

I am trying to make a script that will check the BitLocker status automatically, and then send an email if it is not enabled. Here is what I have so far: Get-BitlockerVolume -MountPoint "C:" | Select ProtectionStatus That shows me the status, but…
Garland Wiersema
  • 33
  • 1
  • 1
  • 8
3
votes
2 answers

TPM Owner password and lockout password with Windows 10 & linux

I've setup a dual boot so I have windows 10 and ubuntu. Following steps on this page I'm able to retrieve the lockout password and the owner password of my TPM in the windows 10 registry. Result looks like this…
b3nj1
  • 667
  • 1
  • 6
  • 17
3
votes
1 answer

PHP LDAP get BitLocker Keys from Active Directory

I have been struggling with this for a while, I am trying to find the BitLocker Recovery Keys from AD using PHP, this is part of a tracking tool. I can access the computer element, and I have access to the keys but when I check for…
2
votes
0 answers

Go win64 api permission denied

I am using this Windows API wrapper to try and get bitlocker status. My code is: test, err := wapi.GetBitLockerConversionStatus() I am getting the following error: err wmi.Connect: permission denied: Exception occurred. (Access denied ) When I'm…
2
votes
1 answer

Where in the boot process does the TPM decrypt or start decrypting a drive encrypted with BitLocker

As the title sugegsts, I'm trying to figure out when the TPM chip in a computer begins the decryption process to be able to boot a drive encrypted with BitLocker. Or, where could I find more information about it?
2
votes
0 answers

Detect BitLocker programmatically from Rust without admin privileges

similar to this thread: Detect BitLocker programmatically from c# without admin I want to get the bitlocker status of a drive programmatically in Rust (without admin privileges). Is there a way, to check the bitlocker status without admin…
ph0llux
  • 21
  • 2
2
votes
1 answer

BitLocker locks all drives other than C: drive on windows 10 Dell machine

Windows10 asked me to force restart the windows system to install latest updates. After restarting the machine it locks all the drives except C: drive. I am using Dell with Windows 10. I am able to manage to deactivate the BitLocker for C: drive…
2
votes
0 answers

How to write the physical sectors of a BitLocker-encrypted volume?

I call CreateFile() and I open \\.\PhysicalDrive0, then I read the sectors of a BitLocker-encrypted volume, and everything works fine. This way I create a backup copy of the physical (encrypted) sectors of a volume that is encrypted with…
2
votes
3 answers

How do I get a specific value from a line in powershell

I'm trying to get a specific value out of the manage-bde -status C: command, which returns the following: BitLocker Drive Encryption: Configuration Tool version 10.0.18362 Copyright (C) 2013 Microsoft Corporation. All rights reserved. Volume C:…
1
2 3
9 10