1

enter image description here enter image description here

Why not?!

How can I find out why not?

I recently enabled Bitlocker without TPM in our domain controller:

enter image description here

Update

Thanks to Greg's 2nd comment I've discovered that I need a basic disk:

C:\Windows\system32>bdehdcfg -driveinfo
BitLocker Drive Preparation Tool version 6.3.9600
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Initializing, please wait...

BitLocker Setup requires a basic disk. Convert your dynamic disk to a basic
disk and run BitLocker Setup again.

This could be problematic in my case:

enter image description here

This machine is a Buffalo Terastation - WS5000R2 series.

Ronnie Overby
  • 681
  • 2
  • 12
  • 24
  • Try it from the command line, and post any messages here. `manage-bde -on C: -RecoveryPassword -StartupKey x:` where x: is the drive where you want to store the startup key. If you want to store the startup key on the Recovery partition, you will need to temporarily map a drive letter to it. – Greg Askew Aug 19 '15 at 16:50
  • Also, probably should go without saying, you need to have a valid recovery partition. You can run `bdehdcfg -driveinfo` for more information. – Greg Askew Aug 19 '15 at 16:54
  • A clue from your second suggestion: `BitLocker Setup requires a basic disk. Convert your dynamic disk to a basic disk and run BitLocker Setup again.` – Ronnie Overby Aug 19 '15 at 17:14
  • See my update above. – Ronnie Overby Aug 19 '15 at 17:20

1 Answers1

0

Buffalo should do a better job disclosing that product does not provide any encryption capability (or use disks with builtin hardware encryption for at-rest encryption). I think the solution here would be to acquire another appliance that has encryption and return the Buffalo WSS appliance.

Greg Askew
  • 35,880
  • 5
  • 54
  • 82