Encryption and decryption action

From the module, you can start encryption or decryption of the selected partition, as well as temporarily disable BitLocker protection without decrypting the data.

Configuration of the encryption method and BitLocker protection.

Partition encryption

1

Go to IT Management > Encryption.

2

Locate the computer and the partition you want to encrypt.

3

Click Encrypt.

4

Select the default configuration or specify the encryption and protection methods manually.

5

Save the configuration and start the task.

6

If TPM protection with a PIN or password is selected, the end user will receive a prompt on the computer. They must enter the required PIN or password so that the process can continue.

Encryption method

By default, the system selects the strongest method supported by the computer.

In manual settings, you can specify one or more methods:

• XTS-AES-256 - requires Windows 10 or later,

• XTS-AES-128 - requires Windows 10 or later,

• AES-256,

• AES-128.

If you select multiple methods, BitLocker will apply the strongest method supported by the computer.

Protection method

By default, the system uses protection TPM without a PIN, if the computer supports it.

The following are available in manual settings:

Method	Action
TPM + PIN	Requires TPM and the user to enter a PIN.
TPM	Uses the TPM without additional user action.
Passphrase	Requires the user to enter a password.

If you select multiple protection methods, BitLocker will apply the strongest method supported by the computer.

Selecting TPM protection with a PIN or password requires user action on the computer. The user cannot skip or close this step.

Partition decryption

1

Go to IT Management > Encryption.

2

Locate the computer and the encrypted partition.

3

Click Decrypt.

4

Confirm that you want to start the operation.

The decryption process cannot be canceled after it has started. If the computer is turned off or loses power, BitLocker will resume the process after the device is restarted.

Temporarily disable BitLocker protection

Options Disable and Enable apply to BitLocker protection, not to disk encryption itself.

Disabling protection:

• does not decrypt the data,

• temporarily suspends BitLocker protection,

• may be useful during service work or device configuration changes.

To secure the partition again, use the option Enable.

If you want to permanently remove encryption from the partition, use the option Decrypt, not Disable.

FAQ

Which encryption method is used by default?

The system selects the strongest method supported by the computer.

Does the user need to enter a PIN or password?

Yes, if during configuration you choose protection TPM + PIN or Passphrase.

Can I cancel a decryption process that has started?

No. Once the decryption process has started, it cannot be canceled.

How does the Disable option differ from Decrypt?

The option Disable temporarily suspends BitLocker protection, but the data remain encrypted. The option Decrypt removes encryption from the partition.