EnableKeyProtectors method of the Win32_EncryptableVolume class

Article
08/19/2021

The EnableKeyProtectors method of the Win32_EncryptableVolume class enables or resumes all disabled or suspended key protectors. You can use this method to reenable or resume BitLocker protection on an encrypted volume. This method ensures that the volume's encryption key is not exposed in the clear on the hard disk.

Note

If the disc supports hardware encryption, the band state transitions to "unlocked" from "always unlocked".

Syntax

uint32 EnableKeyProtectors();

Parameters

This method has no parameters.

Return value

Type: uint32

This method returns one of the following codes or another error code if it fails.

If key protectors are already enabled and no other errors occur, this method returns zero.

Return code/value	Description
S_OK 0 (0x0)	The method was successful.
FVE_E_SECURE_KEY_REQUIRED 2150694919 (0x80310007)	No key protectors exist on the volume. Use one of the following methods to specify key protectors for the volume: ProtectKeyWithCertificateFile ProtectKeyWithCertificateThumbprint ProtectKeyWithExternalKey ProtectKeyWithNumericalPassword ProtectKeyWithPassphrase ProtectKeyWithTPM ProtectKeyWithTPMAndPIN ProtectKeyWithTPMAndPINAndStartupKey ProtectKeyWithTPMAndStartupKey
FVE_E_NOT_ACTIVATED 2150694920 (0x80310008)	BitLocker is not enabled on the volume. Add a key protector to enable BitLocker.

Remarks

If the volume is fully encrypted, successfully running this method ensures that the volume is protected. If the volume is partially encrypted, successfully running this method implies that the volume will be protected when it becomes fully encrypted. For more information, see the GetProtectionStatus method.

If TPM-based key protectors exist for the volume, successfully running this method also refreshes these protectors so that the TPM validates against the current startup services on the platform. In other words, you are asserting that the current computer state is the correct state that the TPM will check against on future computer restarts.

Managed Object Format (MOF) files contain the definitions for Windows Management Instrumentation (WMI) classes. MOF files are not installed as part of the Windows SDK. They are installed on the server when you add the associated role by using the Server Manager. For more information about MOF files, see Managed Object Format (MOF).

Requirements

Requirement	Value
Minimum supported client	Windows Vista Enterprise, Windows Vista Ultimate [desktop apps only]
Minimum supported server	Windows Server 2008 [desktop apps only]
Namespace	Root\CIMV2\Security\MicrosoftVolumeEncryption
MOF	Win32_encryptablevolume.mof