This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Device encryption does not encrpyt new partitions

Hello everbody,

i made a Bitlocker policy to all "internal Storage" not to specific volume letters like C: D: ,...

The policy worked at the first time, C: and if D: is available, got encrypted.

My problem:

When create a new Partition like E:, it does not get encrypted. Although i made the policy for whole "internal Storage".

Does anyone know a solution to this?

Thank you!

This thread was automatically locked due to age.

Parents

0 Haridoss Sreenivasan over 7 years ago

Hi Reinhard,

The policy should be applied when the partition/hard disk is added, as long as it is internal storage. Please log off and log in or restart your machine which should trigger the encryption.

Haridoss S

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Reinhard Schwarz over 7 years ago in reply to Haridoss Sreenivasan

No log off or restart helps :(

Doesnt start to encrypt the new partition.
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelMcLannahan over 7 years ago in reply to Reinhard Schwarz

Have you assigned the new drive a drive letter and formatted it, or just created a partition?
Cancel
Vote Up 0 Vote Down

Cancel
0 Haridoss Sreenivasan over 7 years ago in reply to Reinhard Schwarz

Hi Reinhard Schwarz.

What is the version of Windows OS that you are using and have you configured the drive volume to be dynamic? Also when you check the management console, do you see the drive letter E: ?

Haridoss S

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Haridoss Sreenivasan over 7 years ago in reply to Reinhard Schwarz

Hi Reinhard Schwarz.

What is the version of Windows OS that you are using and have you configured the drive volume to be dynamic? Also when you check the management console, do you see the drive letter E: ?

Haridoss S

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Reinhard Schwarz over 7 years ago in reply to Haridoss Sreenivasan

Hi,

i´m using windows 10.

Yes i have formated it to NTFS and gave it a letter.

In the management console the new partitions are displayed, but status stays unencrypted.
Cancel
Vote Up 0 Vote Down

Cancel
0 Haridoss Sreenivasan over 7 years ago in reply to Reinhard Schwarz

Hi Reinhard,

Please refer to SafeGuard Enterprise BitLocker Client does not start to encrypt. Management Center reports "Not prepared" for the machine. Let me know if this resolves your issue.

Haridoss S

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Reinhard Schwarz over 7 years ago in reply to Haridoss Sreenivasan

Hello,

i got a support ticket, that helped me a little bit.

First, i used client version 7. That was wrong. For the Windows version 1607 i need to use client version 8.

On my own laptop, it worked and all other non-boot partitions got encrypted.

BUT: On another PC, it did not help upgrading the client to version 8.

non-boot volumes still did not encrypt.

I got a download link with a new BitLockerNativeWrapper.dll file.

Normally its for MS Surface Tablets and Books with NVME Drives.

TO DO:

- Rename BitLockerNativeWrapper.dll in %Windir%\SysWow64

- Copy the hotfix dll to %Windir%\SysWow64

- Reboot the system

Now all new partitions got encrypted!

Today, i connect a second SSD drive to the PC. Nothing happend. No encryption. :(

Why?

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelMcLannahan over 7 years ago in reply to Reinhard Schwarz

Hi.

The new drive will probably not be covered under the current policy. Your current policy probably contains encrypt internal system boot volumes only and it would need to include non system internal drives as well?

I'm on my phone at present but can add a screenshot soon if that helps?
Cancel
Vote Up 0 Vote Down

Cancel
0 Reinhard Schwarz over 7 years ago in reply to MichaelMcLannahan

Yes you can do that, but i think mine is right. It is set to internal storage.
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelMcLannahan over 7 years ago in reply to Reinhard Schwarz

So under Local Storage Devices you have Internal Storage - Boot Volumes - Non Boot Volumes. You have Internal storage selected and not Boot Volumes category under it?

Is the SSD connected in a standard way, it's not on a removable caddy or anything is it?
Cancel
Vote Up 0 Vote Down

Cancel
0 Reinhard Schwarz over 7 years ago in reply to MichaelMcLannahan

The SSD is connected standard way with SATA.

my policy is set only to internal storage, i think this includes boot and non boot volumes?

or do i have to make 2 policies?
Cancel
Vote Up 0 Vote Down

Cancel
0 Haridoss Sreenivasan over 7 years ago in reply to Reinhard Schwarz

Hi Reinhard,

Policy for internal storage covers both boot and non-boot volumes, so that is not an issue. Could you please share the screenshot of the current policy?

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel