Encrypting an internal hard drive with BitLocker
The following is assumed for the description below:
- Trusted Platform Modules (TPM) 1.2 or higher available (see Checking Trusted Platform Module (TPM) for verification)
- If TPM 2.0 or higher: BIOS configured as “native UEFI” (see Verifying BIOS mode for verification)
- Administrator rights available.
- Press the Windows key.
- The start menu will open.
- Type Manage BitLocker.
- The Manage BitLocker tab will be shown.
- Click on the Manage BitLocker entry with your name.
- The BitLocker Drive Encryption window will open.
- Check whether your hard drives are already encrypted (BitLocker on). In the example, C: is already encrypted, D: isn’t yet.
- Click on the Enable BitLocker button.
- The BitLocker Drive Encryption window will open.
- Select a method for unlocking the drive (e.g.
Automatically unlock this drive on this computer). - This drive is automatically unlocked as soon as an authorised Windows user logs on.
- Click on the Continue button.
- Window changes to selection of a restore method.
- Select a method to back up your recovery key (e.g. Print recovery key).
- The recovery key allows you to access your drive if you forget your password or lose your USB flash memory/smart card.
- Click on the Continue button.
- Window changes to the selection of how much memory space you wish to encrypt.
- Select the
Encrypt entire drive option for higher security. - Click on the Continue button.
- BitLocker encryption is ready.
- Click on the Start encryption button.
- Drive is encrypted. This may take several hours, depending on the size of the drive.
- Drive is encrypted and the database is therefore protected against unauthorised access.
