Bitlocker data drive opens as read only -

Question

I have a virtualized Windows Server 2012R2 running on ESXi 6.0 There are 2 virtual disks in this system, an unencrypted C drive for the OS and a Bitlocker encrypted D drive for data sharing. Bitlocker unlock method is via a password. When the drive is set to auto unlock, the drive is available as expected. If I disable the auto unlock and need to type the password at startup, the drive is available in the clear but it is available as Read Only.

Windows sees this drive as a fixed disk but Bitlocker to Go is being implemented, I assume because of the virtual hard disks. Is this potentially my issue?

I have looked at some other posts that have resolved similar issues with diskpart and the group policy setting "Deny write access to fixed (and removable) drives not protected by BitLocker" Which seems counterintuitive but others appeared to have luck with.

What happens (or does not happen?) at startup when password is required that may be causing this issue?

So I found that if I use the 48 character passphrase as opposed to the password to unlock the drive it opens in read/write mode. Apparently this is being caused since we are enforcing FIPS. — user323936, Nov 25 '15 at 13:59
Very odd, glad you're sorted, not sure this has anything to do with being in a VM though tbh — Chopper3, Nov 25 '15 at 14:14

score 0 · Answer 1 · answered Sep 13 '16 at 23:37

See a solution here: https://social.technet.microsoft.com/Forums/windowsserver/en-US/fb24213a-c7a7-4e4b-803c-6865ae7a91fe/bitlocker-group-policy-requires-that-for-this-drive-to-be-writable-either-autounlock-must-be-set?forum=winserver8gen

You need more than a password for protection, must use smart-card or auto-unlock.

Bitlocker data drive opens as read only -

1 Answers1