BitLocker Drive Encryption is an integral security feature that provides considerable protection for the operating system on your computer and data stored on the operating system volume. BitLocker ensures that data stored on a computer remains encrypted even if the computer is tampered with when the operating system is not running. This helps protect against "offline attacks", attacks made by disabling or circumventing the installed operating system, or made by physically removing the hard drive to attack the data separately.
BitLocker uses the Trusted Platform Module (TPM) to provide enhanced protection for your data and to assure early boot component integrity. This helps protect your data from theft or unauthorized viewing by encrypting the disk volumes.
When installing particular firmware- or BIOS updates, hardware drivers or when updating the operating system, it is recommended to suspend Bitlocker protection.
Otherwise there is a possibility, that Bitlocker protection might request a Recovery Key on next boot of the operating system. Root cause are for example changed system property values, as a result of recent applied updates or drivers.
Please see resolution detailed section below, how to suspend Bitlocker drive encryption to avoid any issues.
NOTE | Updates and Drivers released by dynabook
Usually Windows based firmware- or BIOS updates and hardware drivers are designed to suspend Bitlocker encryption automatically. For example, dynabook is only providing signed (using a trusted signature) Windows based firmware- or BIOS updates and hardware drivers, which do not require any user interaction as described in this document.
For more information about driver signing, please see documentation by Microsoft.
How to suspend BitLocker Drive Encryption and- / or decrypting the volume
The procedure is the same for all BitLocker Drive Encryption configurations on TPM-equipped computers and computers without a compatible TPM.
When you suspend BitLocker (first procedure described below), you can choose either to temporarily turn-off BitLocker (=suspend), or to decrypt the drive. Disabling BitLocker allows TPM changes and operating system upgrades. Decrypting (second procedure described below), the drive means that the volume will once again be readable, and that all the keys are discarded. Once a volume is decrypted, you must generate new keys by going through the encryption process again.
BEFORE YOU START
(DECRYPT) To turn off BitLocker Drive Encryption
By completing this procedure, you have decrypted the drive and removed BitLocker protection.
Dynabook provides this information "as is" without warranty of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability or fitness for a particular purpose. Dynabook shall not be responsible for the topicality, correctness, completeness or quality of the information or software provided. Dynabook is not liable for any damage caused by the use of any information or software provided, including information that is incomplete or incorrect. Any trademarks used herein belong to their respective owners.
Copyright Dynabook Europe GmbH. All rights reserved.