#Cloning hard drive windows 10 bitlocker install#
#Cloning hard drive windows 10 bitlocker software#
#Cloning hard drive windows 10 bitlocker password#

#Cloning hard drive windows 10 bitlocker software#

No Encryption Bitlocker Software EncryptionOn Windows 10, if you keep sensitive files on your device, it is crucial to take the necessary steps to protect them, and this is when BitLocker comes in handy. At the lowest performing benchmark (Random read/write) the drive is still about 80% faster than my unencrypted SATA SSD it replaced. I am going to run Bitlocker in software mode for the boot drive in my device. In my setup I observed that sequential read/write stayed about the same but random read/write took a 50% hit.Д¬onclusion for me: While bitlocker results in reduced IO performance it makes up for this in all other areas. Personal opinion that I just don't trust it on a production system. Project seems inactive for quite some time.

#Cloning hard drive windows 10 bitlocker password#

You must enter a boot password (no USB drive option).

slightly shorter drive life due to the requirement to use hibernation vs sleep.

concerns over ability to recover data in the event the drive is not bootable.

#Cloning hard drive windows 10 bitlocker install#

Difficult and time consuming install requires user to be very tech savvy.

better IO performance using hardware encryption (only in theory as I did not test).

So for those of you that have a BIOS that does not support hardware Bitlocker encryption of NVME boot drives these appear to be your options: It's also dead simple to setup and easy to recover with the recovery key. I like bitlocker because I can use my USB drive to unlock and boot the device instead of entering a password. This is going to add overhead and reduce IO performance. I have not tried this solution.ДЈ) You can use bitlocker with software encryption. This is not an easy thing to install (see below). This installs as a bootloader and uses the hardware encryption to encrypt the drive. In my case the Asus motherboard does not appear to support this.Дў) You can use hardware encryption with something called SEDutil. I have done extensive research on this issue and found the following:ДЎ) The BIOS manufacturer has to support bitlocker hardware encryption for the NVME boot drive. I'm going to answer my own question here. I don't want to use software based encryption due to the IO performance cost.

The board is an ASUS ROG STRIX Z270E with the latest available BIOS. The only difference here is that one is an OS drive and the other a fixed data drive. They are the exact same drives just in different sizes. Bitlocker comes right to the screen asking me to setup a password and USB drive (I have no TPM) I of course get an error stating that it failed because it couldn't revert to software based encryption.Д§) Strangely enough the hardware based encryption works on the secondary 2 TB drive. I also enabled 'additional authentication at startup' because I do not have a TPM.Д¦) I am unable to encrypt the OS drive using hardware encryption. Here are the steps I have taken and the results:ДЎ) Used Samsung Magician software to enable 'Encrypted Drive' on both of the drives.Дў) Booted to the Secure Erase Utility and performed a secure erase on both drivesДЈ) Performed a fresh installation of Windows 10 ProД¤) Checked Samsung Magician software and both drives show 'Enabled' as the status under 'Encrypted Drive'ДҐ) I updated the group policy setting on the system to prevent Bitlocker from reverting to software based encryption when hardware based encryption is unavailable. I am trying to enable hardware based encryption using BitLocker on Windows 10 Pro. The 1 TB model is used as my OS drive and the 2 TB is used as a secondary drive.

Ok so I installed two brand new 970 EVO+ M.2 SSD in my system.