#Bitlocker windows 8.1 download how to
#Bitlocker windows 8.1 download install

On computers that do not have a TPM version 1.2 or later, you can still use BitLocker to encrypt the Windows operating system drive. It works with BitLocker to help protect user data and to ensure that a computer has not been tampered with while the system was offline. The TPM is a hardware component installed in many newer computers by the computer manufacturers. Computers running Windows RT, Windows RT 8.1, or Windows 8.1 can be protected by using Device Encryption, which is a customized version of BitLocker.īitLocker provides the most protection when used with a Trusted Platform Module (TPM) version 1.2 or later. On servers, an additional BitLocker feature that can be installed is BitLocker Network Unlock.

#Bitlocker windows 8.1 download install

When installing the BitLocker optional component on a server you will also need to install the Enhanced Storage feature, which is used to support hardware encrypted drives. Manage-bde is the command-line tool that can also be used to perform tasks on the computer related to BitLocker. Having BitLocker integrated with the operating system addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers. Subsequent operating system releases have continued to improve the security offered by BitLocker to allow the operating system to provide BitLocker protection to more drives and devices. It provides links to additional content that will help you to learn more about working with BitLocker.īitLocker Drive Encryption is a data protection feature of the operating system that was first made available in Windows Vista. This topic provides a high-level overview of BitLocker including a list of new and changed features, system requirements, practical applications, and deprecated features.

#Bitlocker windows 8.1 download how to

I will update this post on how to do that ASAP.Applies To: Windows Server 2012, Windows 8 (You can enable the TPM chip from within the task sequence using a script provided by Lenovo. Make sure the steps are exactly as on the picture.ĥ) Finally I installed the BitLocker Drive Encryption Administration tools on my DC’s, which enables me to view the BitLocker recoverykeys on the computer objects in AD.Ħ) Deploy the task sequence to the proper collection, and make sure the TPM chip is enabled in BIOS and you are set. 2012 SP1 has added support for pre-provisioning of BitLocker, which means SCCM will start encrypting the disk right after partitioning of the disks, and will be done with the image. Computer Configuration > Policies > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives:Ĥ) Configuring the task sequence in ConfigMgr was pretty straightforward.Computer Configuration > Policies > Administrative Templates > Windows Components > BitLocker Drive Encryption:.Computer Configuration > Policies > Administrative Templates > System > Trusted Platform Modul Services:.These are the exact policies that I apply to my Windows 8.1 OU: Here: (v=ws.10).aspx and here: ģ) Further to that, I configured BitLocker policy settings for the Windows 8.1 clients, enabling the TPM chip to backup BitLocker recoverykeys into AD. This is explained in details on TechNet as well. Here’s something about the topic on TechNet: (v=ws.10).aspx#BKMK_3Ģ) What I had to do instead, was to verify that the schema objects was there, and delegate the correct permissions on the OU where my new Windows 8.1 computers are going to be. You have to though, if you’re running 2003 domain controllers. All the necessary information was spread across several TechNet articles, so I decided to put together a post explaining how I did it.ġ) Fortunately for me, our domain is running on 2012 servers, so no need to extend the AD schema. I had no previous experience with BitLocker, so I started out reading and learning and eventually got it to work. We have decided to encrypt our harddrives on our upcoming Windows 8.1 environment using BitLocker.