Before you can turn on BitLocker encryption for Windows, you will need to verify a few things.
-
Click the Windows start button and then click “Settings” (gear icon).
-
Click “System” (upper left corner).
-
Scroll down on the left side; click “About.” scroll down on the right to “Windows specifications” and verify you’re on Windows 10 Education, Windows 10 Professional, Windows 11 Education or Windows 11 Professional.
-
Click “Settings” in the upper left corner.
-
For Windows 10, click “Updates & Security”. For Windows 11, click Windows Update.
-
Click “Advanced options”.
-
Under “Update options,” turn ON updates for other Microsoft products. Under “Update notifications,” turn ON notifications for restarts (in some versions of Windows 10, notifications and options have merged to “Update Options”).
-
Click “Settings” in the upper left corner.
-
You should be on the “Windows Update” window. Click “Check for updates”.
-
Updates will install and Windows will probably need to restart.
-
Once Windows restarts, sign back in.
-
Click the Windows start button; click “Settings” (gear icon).
-
For Windows 10, click “Updates & Security”. For Windows 11, click Windows Update.
-
Click “Check for updates”.
-
Repeat the above update steps until the message states, “You’re up to date”.
-
Close “Settings.”
-
Click the Windows Start button; type bitlocker and then press the Enter key.
-
In the Bitlocker Drive Encryption window, click “Turn on Bitlocker.”
-
As Bitlocker prepares to encrypt your hard drive, you will be asked how you want to back up the recovery key. Your recovery key is very very very important. It is a 48-digit key that helps you unlock your device if you ever get locked out with a blue Bitlocker screen. Please slow down on this step and make sure you save a copy of your 48-digit Bitlocker Recovery Key before continuing. Store your personal BitLocker key in a secure location and always accessible location (NOT your OUHSC account). When turning on BitLocker you will be presented with a BitLocker key. OU IT is not able to access your personal BitLocker key. Your device will need to be factory reset if you forget your personal BitLocker key. OU IT is not responsible for lost data as a result of factory resets or forgetting the BitLocker key.
Here is what you will see after you do Step 18 above:
-
Pick one (1) of these options to save/store your Bitlocker Recovery Key: a) In your personal Microsoft account, b) on a printout, or c) on a USB flash drive.
-
After the recovery key has been saved, you’ll be back at the previous window, click “Next.”
-
When asked to choose how much of your drive to encrypt, select “Encrypt used disk space only” and click “Next.”
-
When asked to choose an encryption mode, select “New encryption mode” and click “Next.”
-
When asked if you’re ready to encrypt your drive, select “Run Bitlocker system check” and click “Continue.”
-
When the check has finished, and Windows is ready to encrypt the hard drive, you’ll see a notification in the lower right corner stating you’ll need to restart the computer (If the message goes away, click on the up arrow, click on the little lock with a caution sign to see the message). Click on the message.
-
Click “Restart now.”
-
Once Windows restarts, sign back in.
-
Click on the up arrow on the lower right side of the system tray and click the little lock.
-
You’ll see a progress bar of how much the drive has been encrypted.
-
You’ll see a message stating that your computer’s hard drive has been encrypted. Click “Close.”