Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a laptop with a single hard drive, using the GUID Partition Table (GPT) disk layout, with the following partitions:

  • 120MB EFI System Partition
  • 300MB Microsoft Reserved Partition (MSR)
  • Remainder - GPT primary partition

I have a Windows 8 Professional VHD configured as a native-boot VHD on the GPT primary partition. Can I use Bitlocker to encrypt my main partition, or to encrypt the VHD volume?

share|improve this question

If you have a single physical disk in your system, and you are native VHD booting to a VHD file on that physical disk, then you cannot use Bitlocker on the physical disk partition where the VHD is booting from, and you cannot use Bitlocker on the VHD itself either. You may be able to use Bitlocker on additional partitions that are not being booted to.


Windows® BitLocker® Drive Encryption cannot be used to encrypt the host volume that contains VHD files that are used for native VHD boot, and BitLocker cannot be used on volumes that are contained inside a VHD.

share|improve this answer

...and BitLocker cannot be used on volumes that are contained inside a VHD.

I've read that TechNet article, but I've found that the VHD actually can contain encrypted volumes. I tried it and it worked fine. Of course, you have to have an unencrypted partition on a hard drive to boot onto first (where Bootmgr resides).

However, the VHD can't be on an encrypted host volume, as the article states, and even suspending BitLocker doesn't help.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .