When encrypting a drive, errors may occur. Windows policy settings may conflict with Kaspersky Endpoint Security policy settings. If you are using Windows group policies, turn off BitLocker management in the policy settings. BitLocker does not support single sign-on technology (SSO). After the authentication procedure, BitLocker will allow for users to log in. You can decrypt a drive locally or using a policy.Īfter encrypting the system hard drive, the user needs to go through BitLocker authentication to boot the operating system. For BitLocker to work correctly with Kaspersky Security Center, decrypt the drive and re-encrypt the drive using a policy. However, Kaspersky Endpoint Security will not send the master key to Kaspersky Security Center, so it will be impossible to restore access to the disk using Kaspersky Security Center. If a user encrypts a disk using BitLocker, Kaspersky Endpoint Security will send information about disk encryption to Kaspersky Security Center. Kaspersky Endpoint Security sends the master key to Kaspersky Security Center so that you can restore access to the disk, for example, if a user has forgotten the password. BitLocker uses the following authentication methods:Īfter encrypting a drive, BitLocker creates a master key. In this case, the access key will be encrypted with a password. You can still encrypt drives on a computer without a TPM. Using TPM is the safest way to store BitLocker access keys, since TPM provides pre-startup system integrity verification. A Trusted Platform Module is usually installed on the computer motherboard and interacts with all other system components via the hardware bus. Step 3: Once you entered the Powershell, Type the command Disable-BitLocker -MountPoint 'A:' (Here replace A with the hard drive partition of your choice). Step 2: From the search menu Right-click on Windows Powershell and Run as administrator.

A Trusted Platform Module (TPM) is a microchip developed to provide basic functions related to security (for example, to store encryption keys). Step 1: Press on Windows + S key and type Powershell. For more details on BitLocker, refer to Microsoft documentation.īitLocker provides secure storage of access keys using a trusted platform module.

BitLocker cannot be used for encryption of removable drives. Kaspersky Endpoint Security allows you to control and manage Bitlocker using Kaspersky Security Center. BitLocker is an encryption technology built into Windows operating systems.

Remove bitlocker