To configure file and disk encryption using Bitlocker in Windows Server 2012 R2, you need to know the basic of Bitlocker driver encryption tools. The Windows Server 2012 R2 supports two different types of file and disk encryption, BitLocker and Encrypting File System (EFS). In this article, we are going to Configure disk encryption using Bitlocker in Windows Server 2012 R2 and Windows 10.

File and Disk Encryption Using Bitlocker

BitLocker provides fix drive encryption, operating system drive encryption and Removable drive encryption. For OS drive encryption, Bitlocker uses a Trusted Platform Module (TPM). In case when the system doesn’t have TPM, you can use an additional method using USB or Network Unlock to enable Bitlocker. The Bitlocker to go is for removable drive.

Install  BitLocker Encryption

By default, the BitLocker is not installed in Windows Server. You should install it from server manager, or using the install-WindowsFeature PowerShell command line.

1. From the Server Manager dashboard, click Manage then click Add Roles and Features to open the Add Roles and Features Wizard.

2. On the Before you begin page click Next.

3. On the Installation Type page, select Role-based or feature-based installation and hit Next. On the Server Selection page click Next also. 

4. Leave the default and click Next on the Server Roles page.

5. On the Features, page select BitLocker Drive Encryption and BitLocker Network Unlock. Add the required features also then click Next.

Remember, if you want to have the BitLocker icon on the control panel, you should install the Desktop Experience features also. The desktop experience feature is under the User interfaces and infrastructure…

6. Click Next on the WDS page and go to the Role Services page, on the Role Services page select Deployment Server and Transport Server then click Next.

7. On the Confirmation page tick the Restart the destination server automatically if required option then clicks Install and let the installation process finished successfully. After the installation, the system will restart and Close the installation page.

Install BitLocker, BitLocker Network Unlock with PowerShell

To install BitLocker driver encryption and BitLocker Network Unlock features with Windows PowerShell, do it with Install-Feature command

Install-WindowsFeature -Name BitLocker,BitLocker-NetworkUnlock,Desktop-Experience -IncludeAllSubFeature -IncludeManagementTools -Restart

Here is the result. The BitLocker, BitLocker Network Unlock and Desktop Experience installed successfully.

OK, the installation has finished. Now you should configure BitLocker for fix drive and Operating system.

Enabling BitLocker Encryption on Operating System Drive

For encrypting operating system drive, the BitLocker need TPM which previously explained about TPM. If your system doesn’t have TPM, you must configure additional method to encrypt OS drive using USB flash drive.

1. Go to Group Policy Manager by typing “gpmc.msc” on the Windows Run, then create a GPO.

2. Right-click the newly created GPO (Bitlocker Drive Encryption) and click Edit.

3. On the Group Policy Management Editor page, expand Computer Configuration to Operating System Drives. Then double click on Require additional authentication at startup to open and Enable it.

4. Enable the Require additional authentication at startup (Windows Server 2008 and Windows Vista) then click OK to apply the changes.

5. Try to enable the Bitlocker on the OS drive of the Windows Server 2012 R2.

With this two method USB flash drive and Enter Password you can enable it on Operating system drive.

That’s all enabling BitLocker on OS driver, but let’s configure Bitlocker Network Unlock with help us to unlock BitLocker OS encrypted drive through the network.

Enable BitLocker Network Unlock

The BitLocker Network Unlock will unlock the encrypted OS drives through the network. But it needs some roles to be installed on Windows Server.

Require Roles for Bitlocker Network Unlock

• Active Directory
• DNS Server
• DHCP Server
• WDS Server

Let’s configure BitLocker Network Unlock through group policy from Windows Server 2012 R2.

1. On the Group Policy Management Editor page, expand Computer Configuration to Operating System Drives. Then double click on Allow network unlock at startup to open and Enable it.

Click OK to apply the changes.

Testing Bitlocker Network Unlock

Here I’m testing Bitlocker network unlock on a client system with Windows 10 pro.

1. To enable it, go control panel and click BitLocker Driver Encryption and enable it on OS drive.

2 Click Enter a password then type a password and confirm it then click Next.

3. Save the recovery key to a file of USB. Keep the recovery key to a secure place then click Next.

4. On the Choose how much of your drive to encrypt click Next.

5. Do nothing, just click Continue to restart the system and starts encrypting operating system drive.

6. Click Restart now to restart the system.

7. Finally, after restarting the system, the Bitlocker ask you the startup password.

OK, we have successfully enabled and configured BitLocker, BitLocker Network Unlock on Windows Server 2012 R2 and Windows 10. Hope the “File and Disk Encryption Using Bitlocker In Windows Server 2012 R2” article will help you to get more about disk encryption using BitLocker.

The post File and Disk Encryption Using Bitlocker In Windows Server 2012 R2 appeared first on TECHNIG.

The BitLocker Drive Encryption is a full disk encryption feature included with Pro editions of Windows. It is and enterprise level of Windows Features. So the BitLocker is not for basic and home edition of any Windows. If you want to use this feature of your Windows Operating system, in order to protect your data from loss, theft, or hackers, your must have at least Windows 8 Pro edition. The BitLocker drive encryption is available in the Enterprise and Ultimate editions of Windows Vista and Windows 7, then it is not only for Windows 8. The graphical BitLocker interface in Windows Vista could only encrypt the operating system volume, encrypting other volumes could be achieved through an included command-line tool

How to Enable BitLocker Drive Encryption?

In this article I’m going to test BitLocker on Windows 10 and it must work the same as equivalent edition of Windows. Using BitLocker drive encryption is easy, but the most important things is to do not forget your BitLocker password when you encrypt a drive.

So go to Windows control panel, in Windows 10 press Windows button + X then press P to open control panel or search Bitlocker on Windows Start menu. It is the shortest way to reach Bitlocker. Now open Bitlocker Driver Encryption and you must see a page like screenshot.

Here we have two types of drive encryption. One is for Operating system drive which is contain the Windows system files and startup files and another is Fixed data drive which is only keep non Windows files. Firs try to enable for Fixed drive like drive D: and F:.

Enable BitLocker Drive Encryption for Fixed Data Drives

It is easy, just click Turn on BitLocker for each fixed drive you need to enable it. I’m try on drive D: which is a fixed data drive.

On the Chose how you want to unlock this drive page, check the Use a password to unlock the drive, then enter the password. Enter some strong password, should contain small and capital alphabets, numbers, symbols and the length must be at least 8 characters. Don? So press enter or click Next.

Now save the BitLocker recovery key to a file, your Microsoft account or print it to paper. The easiest way is save to a file, write or print it.

Note: don’t forget to save your password to safe place. If you forgot your password, you will loss your files.

When you have saved the password click Next. On the next page leave the default, Encrypt used disk space only… and click Next. 

Now the system ask you, are you ready to encrypt your drive? Simply click start encryption.

Let the BitLocker drive encryption completely encrypt your drive. It take a while and depend on your drive files.

Now, your drive is successfully encrypted and it has locked with a golden lock. In order to unlock it, click twice and enter the password.

You can Manage BitLocker options from Bitlocker page. changing password, Turn it on or off, and even remove password.

That was all about fixed drive and some other Bitlocker functions on Windows. But how to enable it on System drive where Windows is located? In the next article I will show you How to enable Bitlocker for Operating system drive?.  So hope you enjoy this article.

The post Enable BitLocker Drive Encryption on Windows To Protect Your Data appeared first on TECHNIG.