Where is bitlocker startup key stored

As a matter of fact, there arises the need to copy the startup key to another USB flash drive as a backup element in order to save that for future use. Firstly you can save this copy of startup key to any other USB flash drive as a backup for safety. Secondly, saving a copy of this key to various flash drives in order to have an additional backup.

You can complete the task easily using three options. As a matter of fact, you should be a little cautious while doing this. You can complete the whole process in three sections in order to have a clear conception and avoid making any mistakes.

The sections are as follows:. To do so, type in cmd on Cortana and then keeping a hold on Ctrl and Shift keys, hit Enter. Step 2 — In the elevated Command Prompt , insert the following command and after finishing typing, press the Enter button. For example — If the actual drive letter is F, then the command will be —. Step 3 — Proceeding forward, you will a section with the name External Key. Scroll down and find the External Key File Name. Encryption on a BitLocker-protected computer Before the encryption starts, the encryption keys are generated by BitLocker.

Endpoints without TPM If an endpoint is not equipped with a TPM, either a BitLocker startup key or, if the endpoint is running Windows 8 or later, a password can be used as the logon mode. For boot volumes , it is essential that the startup key is available when the endpoint is started. Therefore, the startup key can only be stored on removable media.

The data required for recovery is saved in specific key recovery files. Note If a BitLocker-encrypted hard disk in a computer is replaced by a new BitLocker-encrypted hard disk, and the new hard disk is assigned the same drive letter as the previous hard disk, SafeGuard Enterprise only saves the recovery key of the new hard disk.

The How do you want to back up your recovery key? Do not save the Recovery Key to a file on your hard drive or to the USB drive that you are using for your startup key. Save it somewhere else or print it. You will need the Recovery Key if your computer ever has a problem. Make your selection and click the Next button BitLocker now asks Are you ready to encrypt the drive?

Enable the Run BitLocker system check Click the Continue button A system restart is now required, Click the Restart now button and let the system reboot.

After rebooting, the Full Hard Drive Encryption process has begun. It will take about an hour to complete this. You may use your computer while this is occurring but it will run slowly until completed.

The encryption process is stopped if your computer goes to sleep, hibernates or is shutdown.