Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a laptop with a single hard drive, using the GUID Partition Table (GPT) disk layout, with the following partitions:

  • 120MB EFI System Partition
  • 300MB Microsoft Reserved Partition (MSR)
  • Remainder - GPT primary partition

I have a Windows 8 Professional VHD configured as a native-boot VHD on the GPT primary partition. Can I use Bitlocker to encrypt my main partition, or to encrypt the VHD volume?

share|improve this question
add comment

2 Answers

If you have a single physical disk in your system, and you are native VHD booting to a VHD file on that physical disk, then you cannot use Bitlocker on the physical disk partition where the VHD is booting from, and you cannot use Bitlocker on the VHD itself either. You may be able to use Bitlocker on additional partitions that are not being booted to.

Source

http://technet.microsoft.com/en-us/library/hh825689.aspx#BKMK_limitations

Windows® BitLocker® Drive Encryption cannot be used to encrypt the host volume that contains VHD files that are used for native VHD boot, and BitLocker cannot be used on volumes that are contained inside a VHD.

share|improve this answer
add comment

...and BitLocker cannot be used on volumes that are contained inside a VHD.

I've read that TechNet article, but I've found that the VHD actually can contain encrypted volumes. I tried it and it worked fine. Of course, you have to have an unencrypted partition on a hard drive to boot onto first (where Bootmgr resides).

However, the VHD can't be on an encrypted host volume, as the article states, and even suspending BitLocker doesn't help.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.