1

I want to enable Bitlocker on my Windows 10 computer, but I don't want to enable Secure Boot, since it interferes with other partitions.

If I enable Bitlocker without a TPM (enter password at boot), does that require me to have Secure Boot enabled?

  • I am not seeing any mention of secure boot in the article. Care to summarize? – DCIndieDev Apr 18 '17 at 21:56
  • 1
    "BitLocker has the following hardware requirements:" If Secure Boot isn't listed in that article then it isn't required to enable it. – Ramhound Apr 18 '17 at 22:25
  • I have said that before also. All OEM devices that come with Windows 8+ must support the ability to disable Secure Boot. It's a requirement for that OEM to even place Windows 10 on that device. – Ramhound Apr 18 '17 at 22:27
1

No

Secure boot is part of a firmware standard specification (UEFI) that blocks untrusted operating systems from booting. It (debatably) secures the EFI partition which is read first during boot. No passwords are required.

Microsoft Bitlocker existed before UEFI and is typically stored on a Windows System or Recovery partition, so that indicates it is independent. It blocks operating systems from accessing certain volumes and needs password decryption.

0

No, BDE doesn't need Secure Boot or UEFI.

If you enable BDE without a TPM, you need to set as a protector, i.e. a usb dongle (usb drive). Then, you need everytime when you startup the system to put the usb drive in. You have to configure the BDE over domain group policies or local group policies. Look here: https://gpsearch.azurewebsites.net/#13640

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.