F5F Stay Refreshed Software Operating Systems Activating TPM alongside BitLocker encryption on drives is possible and enhances security.

Activating TPM alongside BitLocker encryption on drives is possible and enhances security.

Activating TPM alongside BitLocker encryption on drives is possible and enhances security.

T
TVeiga
Junior Member
8
08-31-2021, 12:56 AM
#1
Hey everyone, here are your questions rephrased:

I have two storage devices that use BitLocker. One is for system files (CSmile and another holds personal data. I installed BitLocker on both a few years ago when my motherboard lacked a TPM chip. About a year ago I upgraded to a new board with TPM support, and I’m considering a fresh install and possibly using Windows 11. I’m curious what happens if I turn on the TPM in the BIOS during that process.

If I enable TPM in the BIOS, does it affect my existing BitLocker-protected drive? I’m not concerned about the boot drive since it will be formatted, but for my personal drive I just need to remember the BitLocker password once in Windows 11 to access it. Assuming I have the password, is there any real danger of losing data?

Also, what are the pros and cons of pairing BitLocker with TPM? For instance, if my board fails and I move the drive to another machine, can I still unlock a BitLocker-protected drive without TPM? Thanks all!
T
TVeiga
08-31-2021, 12:56 AM #1

Hey everyone, here are your questions rephrased:

I have two storage devices that use BitLocker. One is for system files (CSmile and another holds personal data. I installed BitLocker on both a few years ago when my motherboard lacked a TPM chip. About a year ago I upgraded to a new board with TPM support, and I’m considering a fresh install and possibly using Windows 11. I’m curious what happens if I turn on the TPM in the BIOS during that process.

If I enable TPM in the BIOS, does it affect my existing BitLocker-protected drive? I’m not concerned about the boot drive since it will be formatted, but for my personal drive I just need to remember the BitLocker password once in Windows 11 to access it. Assuming I have the password, is there any real danger of losing data?

Also, what are the pros and cons of pairing BitLocker with TPM? For instance, if my board fails and I move the drive to another machine, can I still unlock a BitLocker-protected drive without TPM? Thanks all!

V
Vecrasin
Junior Member
4
09-01-2021, 12:16 PM
#2
Ensure your drive is unbitlocked before proceeding. Then reencrypt it. Based on what I know, the data will become locked and unavailable unless you act. It might be intended to disable TPM rather than enable it, so I’d exercise caution.
V
Vecrasin
09-01-2021, 12:16 PM #2

Ensure your drive is unbitlocked before proceeding. Then reencrypt it. Based on what I know, the data will become locked and unavailable unless you act. It might be intended to disable TPM rather than enable it, so I’d exercise caution.

M
manglemadness
Member
117
09-20-2021, 07:56 PM
#3
Keep your recovery key ready at all times. If your TPM is off, the only BitLocker configuration you can use is password-based, though this shouldn’t be affected by turning TPM on or off.
M
manglemadness
09-20-2021, 07:56 PM #3

Keep your recovery key ready at all times. If your TPM is off, the only BitLocker configuration you can use is password-based, though this shouldn’t be affected by turning TPM on or off.