Macrium Reflect X question

Greetings all, I have a question. How exactly do I enable Reflect's image encryption and is the data on unlocked BitLocker partitions still encrypted? Thanks!

Image encryption: follow the instructions when you create the image
Bitlocker: I believe MR is warning you that your bitlocked partitions (which are, of course, visible and decrypted while you are logged on) will be imaged in that decrypted (readable by all) state.

@mngerhold - What I mean is the last line that says consider enabling Reflect's image encryption except I don't see anywhere in the program to enable encryption. When I looked online, it says that even if bitlocker is unlocked, the data is supposed to still be encrypted.

Almighty1 said:

Greetings all, I have a question. How exactly do I enable Reflect's image encryption and is the data on unlocked BitLocker partitions still encrypted? Thanks!

View attachment 142438

Click to expand...

As you get full support with Reflect X, why not ask on the Macrium Reflect Forum as their guys are the experts?

@Almighty1 When you create the definition file, you have to enable a password for it to enable encryption. ENSURE you make a note of it as you will need it if you have to restore it!!!

RTeeL said:

@Almighty1 When you create the definition file, you have to enable a password for it to enable encryption. ENSURE you make a note of it as you will need it if you have to restore it!!!

Click to expand...

Yes. you are right. All they are really saying is to use the built-in AES protection, at least according to this:

I still wonder though, is there anything in Dell's Support partition that needs to be encrypted since I thought all the DELLSUPPORT Recovery partition was is it will factory restore the system but it does not have personal data in it.

Since what is strange is that we all know that Windows BitLocker is only supposedly on Windows Professional Edition and not Windows Home Edition as this system originally shipped with Windows 10 Home but BitLocker was enabled on both the C: and the Dell Recovery partition. I turned Bitlocker off on the C: drive when I still was on the Home Edition and since the Dell Recovery partition does not have a drive letter assigned to it, Windows does not even show that drive directly. I did upgrade to Windows Professional after I was using Windows 11 Home Edition many years ago and as Macrium Reflect shows, the Dell Recovery partition while BitLocker is already unlocked. Whether or not I assign a letter to the Dell Recovery partition, I am able to browse and see the contents using DiskGenius when I tried it a few days ago.

cereberus said:

As you get full support with Reflect X, why not ask on the Macrium Reflect Forum as their guys are the experts?

Click to expand...

Well, as a NASA Astrophysicist, my copy of Reflect X is part of a enterprise license so I will have to go through NASA's IT which can be weeks or longer as they are the ones who has to be in contact with Macrium Support for the answer as I cannot contact Macrium directly since I don't have that authority. The other reason is from all the Macrium threads here on elevenforums, I am sure there has to be people who uses Macrium Reflect that own Dell's which has that unlocked bitlocker partition on the original storage device that shipped with the system and they have upgraded to a newer larger storage device so they have the experience of cloning it. And the other reason is someone else may find the thread helpful for reference in the future as your answer is similar to saying that the forums here should not exist either since every software has their own support somewhere else. But regardless, it seems that Macrium Reflect itself will only copy the data unencrypted like the article I mentioned in the last comment says.

Can someone please give me a rundown of this?
I have always been so sceptcal of bitlocker in Windows. Never confident to setup for clients as they may lose their encryption keys, what limitations there are during boot / backup / restore etc.

Plus, if you were able to answer all that, why would you leave volumes Bitlocker encrypted but unlocked??? Why or when would you encrypt those volumes?
I guess a little similar to Secure Boot? Having to disable it to boot Ventoy etc... Still never mastered or played around with secure boot much either!

Cheers!

Client system drive setup.

Search the MR X Knowledge Base here

IanMosley said:

Search the MR X Knowledge Base here

Click to expand...

Did you bother to even read the thread?
Answer is already provided in comment #5 and the knowledge base direct link to the answer is in comment #6.

Almighty1 said:

what is strange is that we all know that Windows BitLocker is only supposedly on Windows Professional Edition and not Windows Home Edition as this system originally shipped with Windows 10 Home but BitLocker was enabled on both the C: and the Dell Recovery partition....

Click to expand...

Device Encryption is the poor cousin of Bitlocker. It uses the same encryption as Bitlocker, but is left unlocked at all times. It offers limited protection. If an intruder can log into Windows they can read everything. Only if they try to boot from another OS on a USB, or remove the drive to read it on another machine, is the data protected.

Device Encryption is available for all editions including Home. It is on by default for installs of Windows 10 on suitable devices, and on most devices for Windows 11, even if you install Home. Only in Pro can you then lock the encrypted drive and turn Device Encryption into full Bitlocker.

Unlike BitLocker Drive Encryption, which is available on Windows Pro, Enterprise, or Education editions, Device Encryption is available on a wider range of devices, including those running Windows Home....

Click to expand...

Bree said:

Device Encryption is the poor cousin of Bitlocker. It uses the same encryption as Bitlocker, but is left unlocked at all times. It offers limited protection. If an intruder can log into Windows they can read everything. Only if they try to boot from another OS on a USB, or remove the drive to read it on another machine, is the data protected.

Device Encryption is available for all editions including Home. It is on by default for installs of Windows 10 on suitable devices, and on most devices for Windows 11, even if you install Home. Only in Pro can you then lock the encrypted drive and turn Device Encryption into full Bitlocker.

Check Device Encryption Support in Windows 11

This tutorial will show you how to check if your PC supports using Device Encryption in Windows 11. Device encryption is a Windows feature that enables BitLocker encryption automatically for the Operating System drive and fixed drives. It’s particularly beneficial for everyday users who want to...

www.elevenforum.com

Click to expand...

Many thanks, @Bree! That makes sense and I do remember reading about that one here. Are things like Minitools Partition Wizard, Disk Genius, Macrium Reflect, Hasleo Backup Suite supposed to show Device Encryption as a Bitlocker Partition though? I noticed that for the DELLSUPPORT hidden Recovery partition, the only thing that actually mentioned it being unlocked is Macrium Reflect, everything else just will show it as a Bitlocker protection which everyone will assume is locked.

Dell apparently added the word Bitlocker to Device Encryption so one would think it's the actual Bitlocker product