BitLocker/PersonalUse - Revision history

Vsammeta: Added alt text to all images on page

2026-03-23T17:18:50Z

Added alt text to all images on page

Mbaney at 19:27, 19 November 2025

2025-11-19T19:27:40Z

← Older revision		Revision as of 19:27, 19 November 2025
Line 6:		Line 6:
	* Any desktop edition of Windows 11 '''except Home'''. BitLocker encryption is not included as a feature of Windows 11 Home, though encrypted drives can still be accessed via Windows 11 Home.		* Any desktop edition of Windows 11 '''except Home'''. BitLocker encryption is not included as a feature of Windows 11 Home, though encrypted drives can still be accessed via Windows 11 Home.
	* A [https://www.yubico.com/product/yubikey-5-nfc YubiKey security token]. Other security tokens may work, but this procedure will focus on using a YubiKey.		* A [https://www.yubico.com/product/yubikey-5-nfc YubiKey security token]. Other security tokens may work, but this procedure will focus on using a YubiKey.
	* (optional) One or more ~~(2+ strongly preferred)~~ blank USB flash drives at least 500MB in size, formatted with any Windows-writable file system.		* (optional) One or more blank USB flash drives at least 500MB in size, formatted with any Windows-writable file system.

	==Initializing the YubiKey and hard drive==		==Initializing the YubiKey and hard drive==

Mbaney at 19:41, 15 October 2025

2025-10-15T19:41:25Z

← Older revision		Revision as of 19:41, 15 October 2025
Line 4:		Line 4:
	==Prerequisites==		==Prerequisites==
	* A portable hard drive formatted with an NTFS (preferred), FAT16, FAT32, or exFAT file system.		* A portable hard drive formatted with an NTFS (preferred), FAT16, FAT32, or exFAT file system.
	* Any desktop edition of Windows ~~10/~~11 '''except Home'''. BitLocker encryption is not included as a feature of Windows ~~10/~~11 Home, though encrypted drives can still be accessed via Windows ~~10/~~11 Home.		* Any desktop edition of Windows 11 '''except Home'''. BitLocker encryption is not included as a feature of Windows 11 Home, though encrypted drives can still be accessed via Windows 11 Home.
	* A [https://www.yubico.com/product/yubikey-5-nfc YubiKey security token]. Other security tokens may work, but this procedure will focus on using a YubiKey.		* A [https://www.yubico.com/product/yubikey-5-nfc YubiKey security token]. Other security tokens may work, but this procedure will focus on using a YubiKey.
	* (optional) One or more (2+ strongly preferred) blank USB flash drives at least 500MB in size, formatted with any Windows-writable file system.		* (optional) One or more (2+ strongly preferred) blank USB flash drives at least 500MB in size, formatted with any Windows-writable file system.

Mbaney at 16:12, 15 February 2023

2023-02-15T16:12:47Z

← Older revision		Revision as of 16:12, 15 February 2023
Line 4:		Line 4:
	==Prerequisites==		==Prerequisites==
	* A portable hard drive formatted with an NTFS (preferred), FAT16, FAT32, or exFAT file system.		* A portable hard drive formatted with an NTFS (preferred), FAT16, FAT32, or exFAT file system.
	* Any desktop edition of Windows 10 '''except Home'''. BitLocker encryption is not included as a feature of Windows 10 Home, though encrypted drives can still be accessed via Windows 10 Home.		* Any desktop edition of Windows 10/11 '''except Home'''. BitLocker encryption is not included as a feature of Windows 10/11 Home, though encrypted drives can still be accessed via Windows 10/11 Home.
	* A [https://www.yubico.com/product/yubikey-5-nfc YubiKey security token]. Other security tokens may work, but this procedure will focus on using a YubiKey.		* A [https://www.yubico.com/product/yubikey-5-nfc YubiKey security token]. Other security tokens may work, but this procedure will focus on using a YubiKey.
	* (optional) One or more (2+ strongly preferred) blank USB flash drives at least 500MB in size, formatted with any Windows-writable file system.		* (optional) One or more (2+ strongly preferred) blank USB flash drives at least 500MB in size, formatted with any Windows-writable file system.

Mbaney at 19:33, 20 October 2021

2021-10-20T19:33:26Z

← Older revision		Revision as of 19:33, 20 October 2021
Line 4:		Line 4:
	==Prerequisites==		==Prerequisites==
	* A portable hard drive formatted with an NTFS (preferred), FAT16, FAT32, or exFAT file system.		* A portable hard drive formatted with an NTFS (preferred), FAT16, FAT32, or exFAT file system.
	* One or more (2+ strongly preferred) blank USB flash drives at least 500MB in size, formatted with any Windows-writable file system.
	* Any desktop edition of Windows 10 '''except Home'''. BitLocker encryption is not included as a feature of Windows 10 Home, though encrypted drives can still be accessed via Windows 10 Home.		* Any desktop edition of Windows 10 '''except Home'''. BitLocker encryption is not included as a feature of Windows 10 Home, though encrypted drives can still be accessed via Windows 10 Home.
	* A [https://www.yubico.com/product/yubikey-5-nfc YubiKey security token]. Other security tokens may work, but this procedure will focus on using a YubiKey.		* A [https://www.yubico.com/product/yubikey-5-nfc YubiKey security token]. Other security tokens may work, but this procedure will focus on using a YubiKey.
			* (optional) One or more (2+ strongly preferred) blank USB flash drives at least 500MB in size, formatted with any Windows-writable file system.

	==Initializing the YubiKey and hard drive==		==Initializing the YubiKey and hard drive==

Mbaney: /* Initializing the YubiKey and hard drive */

2021-10-20T18:48:23Z

Initializing the YubiKey and hard drive

← Older revision		Revision as of 18:48, 20 October 2021
Line 34:		Line 34:
	# BitLocker will begin encrypting and a separate window will pop up to show you the status. This step will either take a long time if you chose to Encrypt entire drive, or complete very quickly if you chose to Encrypt used disk space only. You do not have to wait for encryption to complete to proceed with the remaining steps, but you do need to wait for encryption to complete before disconnecting the portable hard drive from the machine.		# BitLocker will begin encrypting and a separate window will pop up to show you the status. This step will either take a long time if you chose to Encrypt entire drive, or complete very quickly if you chose to Encrypt used disk space only. You do not have to wait for encryption to complete to proceed with the remaining steps, but you do need to wait for encryption to complete before disconnecting the portable hard drive from the machine.
	#: [[File:Bitlockertogo9.png]]		#: [[File:Bitlockertogo9.png]]
	# Download the '''portable version''' of [https://keepassxc.org/ KeePassXC Password Manager]. Then extract it to your USB flash drive.		# Download the '''portable version''' of [https://keepassxc.org/download/ KeePassXC Password Manager]. Then extract it to your USB flash drive.
	#: [[File:Keepassxc0.png]]		#: [[File:Keepassxc0.png]]
	# Launch KeePassXC.exe from the extracted folder and choose to Create new database.		# Launch KeePassXC.exe from the extracted folder and choose to Create new database.

Mbaney at 17:12, 29 September 2021

2021-09-29T17:12:59Z

← Older revision		Revision as of 17:12, 29 September 2021
Line 56:		Line 56:
	# Your portable hard drive is now securely BitLocker-encrypted, with one or more USB drives serving as access to the recovery key.		# Your portable hard drive is now securely BitLocker-encrypted, with one or more USB drives serving as access to the recovery key.

			==Unlocking the drive==
	===Unlocking the drive with the YubiKey===		===Unlocking the drive with the YubiKey===
	To later unlock the drive from the same or a different computer:		To later unlock the drive from the same or a different computer:

Mbaney: /* Use an encrypted drive as a backup drive */

2021-09-29T13:58:12Z

Use an encrypted drive as a backup drive

← Older revision		Revision as of 13:58, 29 September 2021
Line 91:		Line 91:

	===Use an encrypted drive as a backup drive===		===Use an encrypted drive as a backup drive===
	One of the more useful things you may want to do with a BitLocker-encrypted portable hard drive is set up automatic backup to it. This can be done by following the procedure on [[Windows Personal Backups \| this page]], though please note you will need to unlock the drive each time when plugging it into a computer before it is accessible by backup software.		One of the more useful things you may want to do with a BitLocker-encrypted portable hard drive is set up automatic backup to it. This can be done by following the procedure on [[Windows Personal Backups \| this page]], though please note you will need to unlock the drive each time when plugging it into a computer, or have configured auto-unlock for that computer, before it is accessible by backup software.

Mbaney: /* Initializing the YubiKey and hard drive */

2021-09-29T13:44:00Z

Initializing the YubiKey and hard drive

← Older revision		Revision as of 13:44, 29 September 2021
Line 11:		Line 11:
	# Log in locally to the machine you wish to use for encryption. This procedure will not work over [[Remote Desktop]].		# Log in locally to the machine you wish to use for encryption. This procedure will not work over [[Remote Desktop]].
	# Download and install the [https://www.yubico.com/support/download/yubikey-personalization-tools/ YubiKey personalization tool]. Choose the first option ('''not''' the command line interface version). If you are using a UMIACS-supported workstation, please contact [[HelpDesk \| UMIACS Staff]] to install this on your machine.		# Download and install the [https://www.yubico.com/support/download/yubikey-personalization-tools/ YubiKey personalization tool]. Choose the first option ('''not''' the command line interface version). If you are using a UMIACS-supported workstation, please contact [[HelpDesk \| UMIACS Staff]] to install this on your machine.
	# Insert your YubiKey into any USB slot and launch the personalization tool. Select Static Password at the top and then Advanced.		# Insert your YubiKey into any USB slot on the machine you wish to use for encryption and launch the personalization tool. Select Static Password at the top and then Advanced.
	#: [[File:Yubikey1.png]]		#: [[File:Yubikey1.png]]
	# Select Configuration Slot 2(*) and change the password length to 48 chars. Then click all three Generate buttons in order to generate the identities and the secret key and finally Write Configuration. '''Click cancel (do not save) on the prompt that pops up to save the .csv file, as this saves the Public Identity, Private Identity, and Secret Key in plaintext.''' Ensure that "YubiKey has been successfully configured" is output in the Results window, and then click Exit in the top right to exit the tool.		# Select Configuration Slot 2(*) and change the password length to 48 chars. Then click all three Generate buttons in order to generate the identities and the secret key and finally Write Configuration. '''Click cancel (do not save) on the prompt that pops up to save the .csv file, as this saves the Public Identity, Private Identity, and Secret Key in plaintext.''' Ensure that "YubiKey has been successfully configured" is output in the Results window, and then click Exit in the top right to exit the tool.

Mbaney: /* Initializing the YubiKey and hard drive */

2021-09-29T13:43:40Z

Initializing the YubiKey and hard drive

← Older revision		Revision as of 13:43, 29 September 2021
Line 10:		Line 10:
	==Initializing the YubiKey and hard drive==		==Initializing the YubiKey and hard drive==
	# Log in locally to the machine you wish to use for encryption. This procedure will not work over [[Remote Desktop]].		# Log in locally to the machine you wish to use for encryption. This procedure will not work over [[Remote Desktop]].
	# Download and install the [https://www.yubico.com/~~products/services-software~~/download/yubikey-personalization-tools/ YubiKey personalization tool (~~graphical~~ version)]. If you are using a UMIACS-supported workstation, please contact [[HelpDesk \| UMIACS Staff]] to install this on your machine.		# Download and install the [https://www.yubico.com/support/download/yubikey-personalization-tools/ YubiKey personalization tool]. Choose the first option ('''not''' the command line interface version). If you are using a UMIACS-supported workstation, please contact [[HelpDesk \| UMIACS Staff]] to install this on your machine.
	# Insert your YubiKey into any USB slot and launch the personalization tool. Select Static Password at the top and then Advanced.		# Insert your YubiKey into any USB slot and launch the personalization tool. Select Static Password at the top and then Advanced.
	#: [[File:Yubikey1.png]]		#: [[File:Yubikey1.png]]