For the complete documentation index, see llms.txt. This page is also available as Markdown.

Encryption and decryption action

From the module, you can start encryption or decryption of the selected partition, as well as temporarily disable BitLocker protection without decrypting the data.

Konfiguracja metody szyfrowania i ochrony BitLocker.
Configuration of the encryption method and BitLocker protection.

Partition encryption

1

Go to IT Management > Encryption.

2

Locate the computer and the partition you want to encrypt.

Przycisk Akcji
3

Click Encrypt.

przycisk szyfruj
4

Select the default configuration or specify the encryption and protection methods manually.

Wybierz domyślną konfigurację albo określ metody szyfrowania
5

Save the configuration and start the task.

6

If TPM protection with a PIN or password is selected, the end user will receive a prompt on the computer. They must enter the required PIN or password so that the process can continue.

komunikat na komputerze użytkownika końcowego

Encryption method

By default, the system selects the strongest method supported by the computer.

In manual settings, you can specify one or more methods:

  • XTS-AES-256 - requires Windows 10 or later,

  • XTS-AES-128 - requires Windows 10 or later,

  • AES-256,

  • AES-128.

If you select multiple methods, BitLocker will apply the strongest method supported by the computer.

Protection method

By default, the system uses protection TPM without a PIN, if the computer supports it.

The following are available in manual settings:

Method
Action

TPM + PIN

Requires TPM and the user to enter a PIN.

TPM

Uses the TPM without additional user action.

Passphrase

Requires the user to enter a password.

If you select multiple protection methods, BitLocker will apply the strongest method supported by the computer.

Partition decryption

1

Go to IT Management > Encryption.

2

Locate the computer and the encrypted partition.

3

Click Decrypt.

4

Confirm that you want to start the operation.

The decryption process cannot be canceled after it has started. If the computer is turned off or loses power, BitLocker will resume the process after the device is restarted.

Temporarily disable BitLocker protection

Options Disable and Enable apply to BitLocker protection, not to disk encryption itself.

Disabling protection:

  • does not decrypt the data,

  • temporarily suspends BitLocker protection,

  • may be useful during service work or device configuration changes.

To secure the partition again, use the option Enable.

If you want to permanently remove encryption from the partition, use the option Decrypt, not Disable.

FAQ

Which encryption method is used by default?

The system selects the strongest method supported by the computer.

Does the user need to enter a PIN or password?

Yes, if during configuration you choose protection TPM + PIN or Passphrase.

Can I cancel a decryption process that has started?

No. Once the decryption process has started, it cannot be canceled.

How does the Disable option differ from Decrypt?

The option Disable temporarily suspends BitLocker protection, but the data remain encrypted. The option Decrypt removes encryption from the partition.

Last updated

Was this helpful?