We use cookies to offer you a better browsing experience, analyze site traffic, personalize content, and serve targeted advertisements. If you continue to use this site, you consent to our use of cookies.
Improve the security of your devices by managing data encryption with Microsoft BitLocker.
Use Microsoft BitLocker to encrypt critical data and enhance the security on your corporate devices.
Enables BitLocker encryption in the drive where the OS is installed. By using an input parameter, you can choose to encrypt the entire disk or only the used space.Take a look at the official Microsoft documentation to get more information about BitLocker capabilities.
Run the script as 'local system'. The script should be executed manually.
A timeout of 120 seconds is recommended.
| Label | Description |
|---|---|
| Used Space Only | Defines encryption method used by BitLocker. To encrypt entire drive set to 'false'. Acceptable values are 'true' or 'false'. For more information, please visit this link |
None.
The TPM key protector is added automatically to the BitLocker volume once the encryption is enabled.
Furthermore, the script adds a random 48-digit recovery password which can be backed up and used for recovery data purposes in case of issues.
More information about key protectors at the official Microsoft page.
The encryption starts after device's reboot.
| TpmIsProperlyConfigured | |
|---|---|
| Test Case | The TPM is properly configured and with expected values to allow encryption |
| Environment | Windows 10 1903 EN, i7 6600U 2.60GHz 16GB RAM |
| Results | Successful - TPM validation is passed |
| TpmIsNotPresent | |
|---|---|
| Test Case | The TPM is not present |
| Environment | Windows 10 1903 EN, i7 6600U 2.60GHz 16GB RAM |
| Results | Failure - It fails due to TPM is not present |
| TpmIsNotConfigured | |
|---|---|
| Test Case | TPM doesn't have the expected values |
| Environment | Windows 10 1903 EN, i7 6600U 2.60GHz 16GB RAM |
| Results | Failure - It fails due to TPM invalid values |
| DriveIsNTFS | |
|---|---|
| Test Case | The partition where OS is installed has NTFS filesystem |
| Environment | Windows 10 1903 EN, i7 6600U 2.60GHz 16GB RAM |
| Results | Successful - File system validation is passed |
| UsedSpaceOnlyIsTrue | |
|---|---|
| Test Case | 'true' is provided to encrypt only used space |
| Environment | Windows 10 1903 EN, i7 6600U 2.60GHz 16GB RAM |
| Results | Successful - Input parameter validation passed |
| UsedSpaceOnlyIsFalse | |
|---|---|
| Test Case | 'false' is provided to encrypt the entire OS partition |
| Environment | Windows 10 1903 EN, i7 6600U 2.60GHz 16GB RAM |
| Results | Successful - Input parameter validation passed |
| UsedSpaceOnlyHasInvalidValue | |
|---|---|
| Test Case | Provided a different value than 'true' or 'false' |
| Environment | Windows 10 1903 EN, i7 6600U 2.60GHz 16GB RAM |
| Results | Failure - UsedSpaceOnly allows either 'true' or 'false' |
| SystemDriveEncryptionEnabled | |
|---|---|
| Test Case | BitLocker encryption is enabled for only used space |
| Environment | Windows 10 1903 EN, i7 6600U 2.60GHz 16GB RAM |
| Results | Successful - KeyProtectors added and a message about rebooting is shown in Finder. After rebooting, the encryption is started. |
Returns basic information of BitLocker protection status, including whether volume and key are secured, encryption percentage level, used encryption algorithm, and the protectors used to secure the key.
Run the script as 'local system'. The script should be executed manually.
A timeout of 120 seconds is recommended.
| Label | Description |
|---|---|
| Disk Drive | Volume for which the BitLocker information should be returned. Accepted values are capital letters |
| Label | Type | Description |
|---|---|---|
| Protection Status | String | Indicates whether the volume and its encryption key (if any) are secured |
| Conversion Status | String | The status of the encryption or decryption on the volume |
| Percentage Encrypted | Ratio | The percentage of volume that is currently encrypted |
| Encryption Method | String | The encryption algorithm and key size used on the volume |
| Key Protectors | StringList | Lists of protectors used to secure the volume's encryption key |
Remote Action is compatible with Windows 10 only.
In case of target device not having volumes that could be handled by BitLocker, output will be empty.
| EncryptedDevice | |
|---|---|
| Test Case | Information correctly retrieved |
| Environment | Windows 10 x64 (1809,1903) on Dell Latitude E7470, Lenovo T480s |
| Results | Success - results retrieved match data verified locally |
| UnencryptedDevice | |
|---|---|
| Test Case | Information correctly retrieved |
| Environment | VM Windows 10 x64 multi-language (1809,1903) |
| Results | Success - results retrieved match data verified locally |
| DeviceWithNoCompatibleVolume | |
|---|---|
| Test Case | Information correctly retrieved |
| Environment | VM Windows 10 x86 (1803) |
| Results | Success - results are empty |
