question

jmhatch-9345 avatar image
0 Votes"
jmhatch-9345 asked JennyFeng-MSFT answered

Cannot Encrypt External Hard Drive Using BitLocker

I'm running Windows 10 Pro and am trying to encrypt an external hard drive using BitLocker. I can see the BitLocker option under the Drive Tools tab in File Explorer, but when I select "Turn On BitLocker" I get the following pop-up message:
![78411-capture.png][1]
I also enabled the Control use of BitLocker on removable drives with the Local Group Policy Editor (but I don't think that should matter given what the documentation says since it wasn't configured previously).
What am I doing wrong?
[1]: /answers/storage/attachments/78411-capture.png

windows-10-security
capture.png (37.4 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JennyFeng-MSFT avatar image
1 Vote"
JennyFeng-MSFT answered

@jmhatch-9345
Hi,
You can't require one form and allow the others. If it's a single machine, just pick the one you want (PIN and TPM) and disable the others, either you "allow" each option so you can choose which one when you set Bitlocker on

BitLocker Group Policy settings can be accessed using the Local Group Policy Editor and the Group Policy Management Console (GPMC) under Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption.

Policy path:Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives
For your reference:
78548-image.png
Hope above information can help you.

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



image.png (166.4 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SSengupta-4080 avatar image
1 Vote"
SSengupta-4080 answered

If you have a motherboard and a BIOS compatible with a TPM, you can uncheck the first option "Allow Bitlocker without a compatible TPM".
you may "allow" each option so you can choose which one when you set Bitlocker on.

Alternatively you can "require" an option and disable all the others, so you will not be able to make a choice when you set bitlocker on

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.