Windows 11 encrypted my drive automatically

tonez4466

Member
Local time
1:29 PM
Posts
37
After upgrades no drives are BITlocked on my /SYS win pro - new system totaly, uprgrade then.
 

My Computer

System One

  • Operating System
    win11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Me
    CPU
    i9 10850
    Motherboard
    MS-7C75
    Memory
    16GB
    Graphics Card(s)
    nVIDEA Geoforce 3070
    Sound Card
    Onboard
    Monitor(s) Displays
    Samsung 55inch TV
    Screen Resolution
    3040 X 2160
    Hard Drives
    6TB over 4 drives
    Case
    generic
    Cooling
    water cooled
    Keyboard
    generic
    Mouse
    generic
    Internet Speed
    500mb
    Browser
    various
    Antivirus
    ATM Bitdefender

lx07

New member
VIP
Local time
2:29 PM
Posts
9
That is a serious issue to me considering how hard it can be to get into an encrypted drive. One example, my daughter's laptop failed to boot after an upgrade to Windows 10. I was able to remove the hard, connect it to my desktop, and use dism to revert pending changes
It really does astonish me the anti encryption sentiment on this forum.

Would you rather anyone can read your daughter's hard drive when she loses her laptop? Or her phone? I would not.

With bitlocker your backups aren't encrypted (unless you chose it) so you are trading minor convenience for complete lack of security.

Encryption should be opt out imo as it is with UAC. Protect people from their hope it doesn't happen to them by default. If they insist on saying "I'm the administrator of my PC, I can do whatever" or "No-one will ever steal my PC" then let'm. They are wrong but it's their choice.

Both iOS and Android have taken this approach for years and so does macOS which since T2 encrypts with a null password even if you turn filevault off.

Should they have mentioned it and given opportunity to backup the key? Sure, of course, it's a error. That's the only issue I can see but for me it's immaterial as all my devices have been encrypted for more than a decade.
 

My Computer

System One

  • Operating System
    Windows 10

TairikuOkami

Well-known member
Member
VIP
Local time
2:29 PM
Posts
163
Location
Trnava, SK
I have learnt my lesson about MS, as soon as I install Windows, disabling this junk is part of my routine:
Code:
fsutil behavior set disableencryption 1
cipher /d /s:C:\
reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "1" /f
sc config BDESVC start= disabled
sc config "EFS" start= disabled

It really does astonish me the anti encryption sentiment on this forum.
What is the point of the whole disk encryption? I encrypt important files, more than once actually.
Should they have mentioned it and given opportunity to backup the key? Sure, of course, it's a error.
LoL, that is like jumping out of a plane and then finding out, that they forgot to give you a parachute.
Encryption is a double edge sword, just like 2FA, once you are locked out, your life can be ruined, literally.
I have seen people loosing jobs, diploma, even family photos, because of those. And there are worse cases.
 

My Computer

System One

  • Operating System
    Windows 11 Home
    CPU
    AMD Ryzen 5 3600 (07/19)
    Motherboard
    MSI B450 TOMAHAWK 7C02v1H6 (07/19)
    Memory
    4x 8GB ADATA XPG GAMMIX D10 DDR4 3200MHz CL16
    Graphics Card(s)
    MSI Radeon RX 580 ARMOR 8G OC (08/19)
    Sound Card
    Creative Sound Blaster Z (11/16)
    Monitor(s) Displays
    24" AOC G2460VQ6 (01/19)
    Screen Resolution
    1920×1080@75Hz + FreeSync (DisplayPort)
    Hard Drives
    ADATA XPG GAMMIX S11 Pro SSD 512GB (07/19)
    PSU
    Seasonic M12II-520 80 Plus Bronze (11/16)
    Case
    Lian Li PC-7NB + 3x Noctua NF-S12A FLX@700rpm (11/16)
    Cooling
    CPU Cooler Noctua NH-U12S@700rpm
    Keyboard
    HP Pavilion Wireless Keyboard 600 (05/21)
    Mouse
    HP Wireless Silent 280M Mouse (05/21)
    Internet Speed
    300/30 Mbps via RouterOS (05/21) + TCP Optimizer
    Browser
    Microsoft Edge
    Antivirus
    None
    Other Info
    Headphones: Sennheiser RS170 (09/10) + Software: https://tinyurl.com/7hkjyhsj

Superfly

Well-known member
Member
VIP
Local time
2:29 PM
Posts
247
I have learnt my lesson about MS, as soon as I install Windows, disabling this junk is part of my routine:
Code:
fsutil behavior set disableencryption 1
cipher /d /s:C:\
reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "1" /f
sc config BDESVC start= disabled
sc config "EFS" start= disabled


What is the point of the whole disk encryption? I encrypt important files, more than once actually.

LoL, that is like jumping out of a plane and then finding out, that they forgot to give you a parachute.
Encryption is a double edge sword, just like 2FA, once you are locked out, your life can be ruined, literally.
I have seen people loosing jobs, diploma, even family photos, because of those. And there are worse cases.
Yep, Bitlocker can be compromised as well - it's not the sure-thing MS thinks it is - there are (I'm sure good reasons) the OEM's did not enforce TPM (as eg.) since whenever MS wanted them to..

This enforced 'security' stuff from MS grates me.
 

My Computer

System One

  • Operating System
    Windows

Almighty1

Active member
Member
VIP
Local time
5:29 AM
Posts
399
Location
San Francisco, California USA
In my case, my C drive has that exclamation mark, this is on a Dell XPS 15 9570 notebook which shipped with Windows 10 Home that was upgraded to Windows 11 Home that I posted about in another thread here: In File Explorer, is this icon how your C: drive shows up under This PC?

What was weird was that the bitlocker was paused so I tried to resume it and it kept complaining about TPM needs to be configured correctly and I ran the tpm.msc that said TPM is ready, etc. so the only way to even get bitlocker turned on was first use the bitlocker manager to unencrypt the drive and then encrypt the drive. This was before I upgraded to Pro from Home. I guess after reading this thread, it's safer to turn bitlocker off since my notebook leaves home about once every 4-5 years or longer.
 

My Computer

System One

  • Operating System
    Windows XP/7/8/8.1/10/11, Linux, Android, FreeBSD Unix
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9570
    CPU
    Intel® Core™ i7-8750H 8th Gen Processor 2.2Ghz up to 4.1Ghz
    Motherboard
    Dell XPS 15 9570
    Memory
    32GB using 2x16GB modules
    Graphics Card(s)
    Intel UHD 630 & NVIDIA GeForce GTX 1050 Ti with 4GB DDR5
    Sound Card
    Realtek ALC3266-CG
    Monitor(s) Displays
    15.6" 4K Touch UltraHD 3840x2160 made by Sharp
    Screen Resolution
    3840x2160
    Hard Drives
    Toshiba KXG60ZNV1T02 NVMe 1024GB/1TB SSD
    PSU
    Dell XPS 15 9570
    Case
    Dell XPS 15 9570
    Cooling
    Stock
    Keyboard
    Stock
    Mouse
    SwitftPoint ProPoint
    Internet Speed
    Comcast/XFinity 1.44Gbps/42.5Mbps
    Browser
    Microsoft EDGE (Chromium based) & Google Chrome
    Antivirus
    Windows Defender that came with Windows

Dru2

Well-known member
Member
VIP
Local time
8:29 AM
Posts
625
Location
Virginia
But from that article, I wonder IF being tied to a Microsoft account, is what's turning on BitLocker?
Two things...

1) I've been running Windows 10 since pre-release to now with a Microsoft Account and never ever had BitLocker auto turned on.
2) I'm currently running Windows 10 on my Lenovo laptop and BitLocker is off. Currently running Windows 11 build version 22449.1000. This is an insiders install. And yes, being used with a Microsoft Account (the same one used for 10).

Anyway, it's odd that this would happen without any notification as Navy is right that it could causes issues if one doesn't know their drive is now encrypted :eek:

That said, as one who is currently using BitLocker on my main system, I have no issues with it. But I do agree users need to be told if this is indeed happening when or after Windows 11 is installed.
 

My Computers

System One System Two

  • Operating System
    Windows 11 Pro (22000.282)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel i9-9900K
    Motherboard
    Gigabyte Aorus Z390 Xtreme
    Memory
    32G (4x8) DDR4 Corsair RGB Dominator Platinum (3600Mhz)
    Graphics Card(s)
    Radeon VII
    Sound Card
    Onboard (ESS Sabre HiFi using Realtek drivers)
    Monitor(s) Displays
    NEC PA242w (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    5 Samsung SSD drives: 2X 970 NVME (512 & 1TB), 3X EVO SATA (2X 2TB, 1X 1TB)
    PSU
    EVGA Super Nova I000 P2 (1000 watt)
    Case
    Cooler Master H500M
    Cooling
    Corsair H115i RGB Platinum
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 2S
    Internet Speed
    100mb
    Browser
    Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming and photography.
  • Operating System
    Win 11 Pro Dev build 22454.1000
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad Yoga X1
    CPU
    Intel i7-7600U
    Motherboard
    Intel
    Memory
    16igg
    Graphics card(s)
    Intel HD 620
    Sound Card
    Onboard
    Monitor(s) Displays
    14.0 WQHD OLED Touch
    Screen Resolution
    2560 x 1440
    Hard Drives
    1TB NVMe Drive (OEM)
    PSU
    laptop
    Case
    laptop
    Cooling
    Laptop cooling
    Mouse
    Logitech MX Anywhere 2S
    Keyboard
    Laptop
    Internet Speed
    100MB
    Browser
    Edge Chromium
    Antivirus
    Windows Security

GaryW

Active member
Local time
8:29 AM
Posts
38
Location
Central Florida
I have 4 W11 VM's, 2 Pros in the beta channel and 1 Pro and 1 Home in the Dev. One was created from scratch and later added to the Insider Program. The other three were all upgraded (?) from W10. None have Bit Locker enabled.
 

My Computers

System One System Two

  • Operating System
    Windows 11 Insider Preview (VM on Hyper-V), Windows 10 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home brew
    CPU
    i5-8500
    Motherboard
    Gigabyte B360M DS3H
    Memory
    32 GB
    Graphics Card(s)
    System
    Sound Card
    System
    Monitor(s) Displays
    Asus 27" on KVM switch
    Screen Resolution
    1920x1080
    Hard Drives
    Kingston 120 GB SSD system dr., 1TB Gigabyte M.2 MVNe data and 1 TB M.2 PCie @ 20 Gb/s virtual drive storage, 2 TB WD HDD
    PSU
    Thermatake 500w
    Case
    Mid Tower
    Cooling
    fans
    Keyboard
    Logitech on KVM
    Mouse
    Logitech on KVM
    Internet Speed
    30 - 40 down, 4 up
    Browser
    Usually Chrome, Edge On insider Preview
    Antivirus
    Defender
    Other Info
    3'rd system is a Kodlux mini that is 11 capable, running W10 pro.
  • Operating System
    Windows 10
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel i5-7600
    Motherboard
    Asus H270-Plus
    Memory
    16 GB
    Graphics card(s)
    System
    Sound Card
    System
    Monitor(s) Displays
    Asus 27 inch on KVM
    Screen Resolution
    1920 x 1080
    Hard Drives
    SPCC 120 GB SSD, 1TB and 2TB WD Sata III
    PSU
    Thermaltech 500w
    Case
    Mid Tower
    Cooling
    fans
    Mouse
    Logitech on KVM
    Keyboard
    Logitech on KVM
    Internet Speed
    30 - 40 down, 4 up
    Browser
    Usually Chrome, occasionally Edge
    Antivirus
    Windows
    Other Info
    Also have 2 seldom used laptops: HP Pavilion 11M-AD113DX Laptop (W11 Capable), W10 Home, Dell Inspiron 13-5368 Laptop, W10 Home + Apple mini, circa 2012

johnlgalt

Antidisestablishmentarianistentarianist
Power User
VIP
Local time
8:29 AM
Posts
1,922
Location
3rd Rock
FWIW, I've had Windows 10 give me the prompt to save my encryption key every single time I've cleanly installed it for the last couple of years. Even when BitLocker was not turned on. Even when I was only mold machine, Core i7 965 EE BIOS based X58 chipset, no TPM, MBR boot. It also did so on Windows 10 on my new (current) rig the last couple of times. I still have backups of each of the keys that were generated.

Also FWIW, Windows 11 has not prompted me once to do so. I've now cleanly installed it ... 3 times, including yesterday.

All throughout this time period, I've only enabled BitLocker once - on another machine (laptop, also connected to same Microsoft account, but a completely independent machine. So I'm confused why I was being asked to save an encryption key when I was not enabling BitLocker to begin with.

Also, in Win10, it was 3-4 days after install, every single time, when I would get prompted to do so.
 

My Computers

System One System Two

  • Operating System
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    Manufacturer/Model
    HomeBrew
    CPU
    AMD Ryzen 9 3950X
    Motherboard
    MSI MEG X570 GODLIKE
    Memory
    4 * Corsair Vengeance 32 GB 3600 MHz
    Graphics Card(s)
    eVGA GeForce GTX 970 SSC ACX 2.0 (04G-P4-3979-KB)
    Sound Card
    Realtek® ALC1220 Codec
    Monitor(s) Displays
    2 * Lenovo LT2323pwA Widescreeen
    Screen Resolution
    2* 1920*1080
    Hard Drives
    3x Sabrent Rocket PCIe Gen4 NVMe M.2 1 TB SSD (SB-ROCKET-NVMe4-1TB)
    SanDisk Ultra SDSSDHII-960G-G25 960 GB SATA III SSD
    Crucial MX100 CT256MX100SSD1 256GB SATA III SSD
    2 * Seagate Barracuda 7200.12 ST31000528AS 1TB 7200 RPM --> RAID1
    PSU
    PC Power & Cooling’s Silencer Series 1050 Watt, 80 Plus Platinum
    Case
    Fractal Design Define 7 XL Dark ATX Full Tower Case
  • Operating System
    Windows 10 x64 Pro build 21H1
    Computer type
    Laptop
    Manufacturer/Model
    Dell Latitude E5470
    CPU
    Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz, 2501 Mhz, 2 Core(s), 4 Logical Processor(s)
    Motherboard
    Dell
    Memory
    16 GB
    Graphics card(s)
    Intel(R) HD Graphics 520
    Sound Card
    Intel(R) HD Graphics 520 + RealTek Audio
    Monitor(s) Displays
    Dell laptop display 15"
    Screen Resolution
    1920 * 1080
    Hard Drives
    Toshiba 128GB M.2 22300 drive
    INTEL Cherryvill 520 Series SSDSC2CW180A 180 GB SATA III SSD
    PSU
    Dell
    Case
    Dell
    Cooling
    Dell
    Mouse
    Logitech MX Master (shared) | Dell TouchPad
    Keyboard
    Dell
    Internet Speed
    AT&T LightSpeed Gigabit Duplex
    Browser
    Edge Chromium | Chrome | Firefox Nightly | Brave
    Antivirus
    Defender + MB4

Dru2

Well-known member
Member
VIP
Local time
8:29 AM
Posts
625
Location
Virginia
FWIW, I've had Windows 10 give me the prompt to save my encryption key every single time I've cleanly installed it for the last couple of years.

What encryption key are you asked to save?

I run both 64-bit editions of Pro and Education, done many installs, clean or otherwise, use BitLocker from time to time, including now, and I've never ever had Windows 10 out of the blue prompt me to save a BitLocker (or any other drive encryption key) unless I actually decided to use BitLocker. And I've been running Windows 10 since the pre-release days.

Perhaps you mean Device Encryption (usually associated with tablets and laptops)? From Brink's tutorial...
Device encryption is available on supported devices (ex: tablet or 2-in-1 laptop) running any Windows 10 edition. If you want to use standard BitLocker encryption instead, it is only available on supported devices running Windows 10 Pro, Enterprise, or Education. Some devices have both types of encryption. BitLocker is not available on Windows 10 Home edition.
Source: How to Turn On or Off Device Encryption in Windows 10
 

My Computers

System One System Two

  • Operating System
    Windows 11 Pro (22000.282)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel i9-9900K
    Motherboard
    Gigabyte Aorus Z390 Xtreme
    Memory
    32G (4x8) DDR4 Corsair RGB Dominator Platinum (3600Mhz)
    Graphics Card(s)
    Radeon VII
    Sound Card
    Onboard (ESS Sabre HiFi using Realtek drivers)
    Monitor(s) Displays
    NEC PA242w (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    5 Samsung SSD drives: 2X 970 NVME (512 & 1TB), 3X EVO SATA (2X 2TB, 1X 1TB)
    PSU
    EVGA Super Nova I000 P2 (1000 watt)
    Case
    Cooler Master H500M
    Cooling
    Corsair H115i RGB Platinum
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 2S
    Internet Speed
    100mb
    Browser
    Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming and photography.
  • Operating System
    Win 11 Pro Dev build 22454.1000
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad Yoga X1
    CPU
    Intel i7-7600U
    Motherboard
    Intel
    Memory
    16igg
    Graphics card(s)
    Intel HD 620
    Sound Card
    Onboard
    Monitor(s) Displays
    14.0 WQHD OLED Touch
    Screen Resolution
    2560 x 1440
    Hard Drives
    1TB NVMe Drive (OEM)
    PSU
    laptop
    Case
    laptop
    Cooling
    Laptop cooling
    Mouse
    Logitech MX Anywhere 2S
    Keyboard
    Laptop
    Internet Speed
    100MB
    Browser
    Edge Chromium
    Antivirus
    Windows Security

johnlgalt

Antidisestablishmentarianistentarianist
Power User
VIP
Local time
8:29 AM
Posts
1,922
Location
3rd Rock
No, this is most definitely NOT a portable device, it was my home built desktop.

I have copies of 5 of them, 4 from this machine, 1 from the previous machine and one from my laptop - all of them are .PFX files, 2566 bytes in length (except the laptop one), and the default name ends up being encryption-key.pfx

I *may* have enabled BitLocker once on the new rig when I built it, but I quickly turned it off for speed. The laptop may have had it one once (that is the other machine I referred to earlier). My old rig I turned it on once as well, but never after that, as it was simply not able to keep up with the speed if enabled. I've never used any other encryption method on my machines, ever, and BitLocker was not enabled when I installed Windows 10 in May, nor has it been enabled in Windows 11, neither during upgrade nor my subsequent upgrades and clean installs.

But every time I cleanly cleanly installed Windows 10, I was given a prompt to save my encryption key, both old rig and current rig. I have all 6 with me.
 

My Computers

System One System Two

  • Operating System
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    Manufacturer/Model
    HomeBrew
    CPU
    AMD Ryzen 9 3950X
    Motherboard
    MSI MEG X570 GODLIKE
    Memory
    4 * Corsair Vengeance 32 GB 3600 MHz
    Graphics Card(s)
    eVGA GeForce GTX 970 SSC ACX 2.0 (04G-P4-3979-KB)
    Sound Card
    Realtek® ALC1220 Codec
    Monitor(s) Displays
    2 * Lenovo LT2323pwA Widescreeen
    Screen Resolution
    2* 1920*1080
    Hard Drives
    3x Sabrent Rocket PCIe Gen4 NVMe M.2 1 TB SSD (SB-ROCKET-NVMe4-1TB)
    SanDisk Ultra SDSSDHII-960G-G25 960 GB SATA III SSD
    Crucial MX100 CT256MX100SSD1 256GB SATA III SSD
    2 * Seagate Barracuda 7200.12 ST31000528AS 1TB 7200 RPM --> RAID1
    PSU
    PC Power & Cooling’s Silencer Series 1050 Watt, 80 Plus Platinum
    Case
    Fractal Design Define 7 XL Dark ATX Full Tower Case
  • Operating System
    Windows 10 x64 Pro build 21H1
    Computer type
    Laptop
    Manufacturer/Model
    Dell Latitude E5470
    CPU
    Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz, 2501 Mhz, 2 Core(s), 4 Logical Processor(s)
    Motherboard
    Dell
    Memory
    16 GB
    Graphics card(s)
    Intel(R) HD Graphics 520
    Sound Card
    Intel(R) HD Graphics 520 + RealTek Audio
    Monitor(s) Displays
    Dell laptop display 15"
    Screen Resolution
    1920 * 1080
    Hard Drives
    Toshiba 128GB M.2 22300 drive
    INTEL Cherryvill 520 Series SSDSC2CW180A 180 GB SATA III SSD
    PSU
    Dell
    Case
    Dell
    Cooling
    Dell
    Mouse
    Logitech MX Master (shared) | Dell TouchPad
    Keyboard
    Dell
    Internet Speed
    AT&T LightSpeed Gigabit Duplex
    Browser
    Edge Chromium | Chrome | Firefox Nightly | Brave
    Antivirus
    Defender + MB4

Dru2

Well-known member
Member
VIP
Local time
8:29 AM
Posts
625
Location
Virginia
But every time I cleanly cleanly installed Windows 10, I was given a prompt to save my encryption key, both old rig and current rig. I have all 6 with me.

Well that's weird as I've never seen that before. And I know I'm not the only one otherwise we'd of seen all sorts of threads on that. That said, I did see a post where someone thought the same but it turned out to be Device Encryption - Bitlocker turned itself on??? Never seen this b4 - Windows 10 Help Forums
 

My Computers

System One System Two

  • Operating System
    Windows 11 Pro (22000.282)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel i9-9900K
    Motherboard
    Gigabyte Aorus Z390 Xtreme
    Memory
    32G (4x8) DDR4 Corsair RGB Dominator Platinum (3600Mhz)
    Graphics Card(s)
    Radeon VII
    Sound Card
    Onboard (ESS Sabre HiFi using Realtek drivers)
    Monitor(s) Displays
    NEC PA242w (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    5 Samsung SSD drives: 2X 970 NVME (512 & 1TB), 3X EVO SATA (2X 2TB, 1X 1TB)
    PSU
    EVGA Super Nova I000 P2 (1000 watt)
    Case
    Cooler Master H500M
    Cooling
    Corsair H115i RGB Platinum
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 2S
    Internet Speed
    100mb
    Browser
    Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming and photography.
  • Operating System
    Win 11 Pro Dev build 22454.1000
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad Yoga X1
    CPU
    Intel i7-7600U
    Motherboard
    Intel
    Memory
    16igg
    Graphics card(s)
    Intel HD 620
    Sound Card
    Onboard
    Monitor(s) Displays
    14.0 WQHD OLED Touch
    Screen Resolution
    2560 x 1440
    Hard Drives
    1TB NVMe Drive (OEM)
    PSU
    laptop
    Case
    laptop
    Cooling
    Laptop cooling
    Mouse
    Logitech MX Anywhere 2S
    Keyboard
    Laptop
    Internet Speed
    100MB
    Browser
    Edge Chromium
    Antivirus
    Windows Security

lx07

New member
VIP
Local time
2:29 PM
Posts
9
I have copies of 5 of them, 4 from this machine, 1 from the previous machine and one from my laptop - all of them are .PFX files, 2566 bytes in length (except the laptop one), and the default name ends up being encryption-key.pfx
Bitlocker keys are .bek files afaik. The .pfx I've never seen but Google says it's a certificate for unlocking network volumes. For example they're discussed here : BitLocker - How to enable Network Unlock (Windows 10) - Microsoft 365 Security


Does that apply to you by any chance?
 

My Computer

System One

  • Operating System
    Windows 10

johnlgalt

Antidisestablishmentarianistentarianist
Power User
VIP
Local time
8:29 AM
Posts
1,922
Location
3rd Rock
Well that's weird as I've never seen that before. And I know I'm not the only one otherwise we'd of seen all sorts of threads on that. That said, I did see a post where someone thought the same but it turned out to be Device Encryption - Bitlocker turned itself on??? Never seen this b4 - Windows 10 Help Forums


Yeah, that's what is odd about it, couldn't really find any sort of information on it - I'm definitely in the minority on this one.


Bitlocker keys are .bek files afaik. The .pfx I've never seen but Google says it's a certificate for unlocking network volumes. For example they're discussed here : BitLocker - How to enable Network Unlock (Windows 10) - Microsoft 365 Security


Does that apply to you by any chance?

Exactly, which is why I know it was not BitLocker. My machines have never been connected to a domain, and I don't have extended network connections either, other than OneDrive and Google Drive, the latter which is using hte FileSteam app and assigned a drive letter, but that is only a recent change for Google Drive.
 

My Computers

System One System Two

  • Operating System
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    Manufacturer/Model
    HomeBrew
    CPU
    AMD Ryzen 9 3950X
    Motherboard
    MSI MEG X570 GODLIKE
    Memory
    4 * Corsair Vengeance 32 GB 3600 MHz
    Graphics Card(s)
    eVGA GeForce GTX 970 SSC ACX 2.0 (04G-P4-3979-KB)
    Sound Card
    Realtek® ALC1220 Codec
    Monitor(s) Displays
    2 * Lenovo LT2323pwA Widescreeen
    Screen Resolution
    2* 1920*1080
    Hard Drives
    3x Sabrent Rocket PCIe Gen4 NVMe M.2 1 TB SSD (SB-ROCKET-NVMe4-1TB)
    SanDisk Ultra SDSSDHII-960G-G25 960 GB SATA III SSD
    Crucial MX100 CT256MX100SSD1 256GB SATA III SSD
    2 * Seagate Barracuda 7200.12 ST31000528AS 1TB 7200 RPM --> RAID1
    PSU
    PC Power & Cooling’s Silencer Series 1050 Watt, 80 Plus Platinum
    Case
    Fractal Design Define 7 XL Dark ATX Full Tower Case
  • Operating System
    Windows 10 x64 Pro build 21H1
    Computer type
    Laptop
    Manufacturer/Model
    Dell Latitude E5470
    CPU
    Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz, 2501 Mhz, 2 Core(s), 4 Logical Processor(s)
    Motherboard
    Dell
    Memory
    16 GB
    Graphics card(s)
    Intel(R) HD Graphics 520
    Sound Card
    Intel(R) HD Graphics 520 + RealTek Audio
    Monitor(s) Displays
    Dell laptop display 15"
    Screen Resolution
    1920 * 1080
    Hard Drives
    Toshiba 128GB M.2 22300 drive
    INTEL Cherryvill 520 Series SSDSC2CW180A 180 GB SATA III SSD
    PSU
    Dell
    Case
    Dell
    Cooling
    Dell
    Mouse
    Logitech MX Master (shared) | Dell TouchPad
    Keyboard
    Dell
    Internet Speed
    AT&T LightSpeed Gigabit Duplex
    Browser
    Edge Chromium | Chrome | Firefox Nightly | Brave
    Antivirus
    Defender + MB4

dbartenstein

Active member
Local time
8:29 AM
Posts
46
I just checked and Bitlocker is not turned on for my Win 11 Home installation. I don't even see any settings for it.
 

My Computers

System One System Two

  • Operating System
    Win 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Acer AN515-54
    CPU
    Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz 2.40 GHz
    Memory
    16GB
    Graphics Card(s)
    Nvidia 1650
    Monitor(s) Displays
    Acer CB272D
    Screen Resolution
    1920x1080
    Hard Drives
    256GB and 1T SSD
    Keyboard
    Logitech K375S
    Mouse
    Logitech M510
    Internet Speed
    250MB
    Browser
    Edge
    Antivirus
    Malwarebytes
  • Operating System
    Win 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell E6430
    CPU
    Intel(R) Core(TM) i7-3540M CPU @ 3.00GHz 3.00 GHz
    Memory
    16 GB
    Graphics card(s)
    Intel HD Graphics 4000, NVIDIA NVS 5200M
    Screen Resolution
    1366x768
    Antivirus
    Malwarebytes

johnlgalt

Antidisestablishmentarianistentarianist
Power User
VIP
Local time
8:29 AM
Posts
1,922
Location
3rd Rock
BitLocker is not available on Home.
 

My Computers

System One System Two

  • Operating System
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    Manufacturer/Model
    HomeBrew
    CPU
    AMD Ryzen 9 3950X
    Motherboard
    MSI MEG X570 GODLIKE
    Memory
    4 * Corsair Vengeance 32 GB 3600 MHz
    Graphics Card(s)
    eVGA GeForce GTX 970 SSC ACX 2.0 (04G-P4-3979-KB)
    Sound Card
    Realtek® ALC1220 Codec
    Monitor(s) Displays
    2 * Lenovo LT2323pwA Widescreeen
    Screen Resolution
    2* 1920*1080
    Hard Drives
    3x Sabrent Rocket PCIe Gen4 NVMe M.2 1 TB SSD (SB-ROCKET-NVMe4-1TB)
    SanDisk Ultra SDSSDHII-960G-G25 960 GB SATA III SSD
    Crucial MX100 CT256MX100SSD1 256GB SATA III SSD
    2 * Seagate Barracuda 7200.12 ST31000528AS 1TB 7200 RPM --> RAID1
    PSU
    PC Power & Cooling’s Silencer Series 1050 Watt, 80 Plus Platinum
    Case
    Fractal Design Define 7 XL Dark ATX Full Tower Case
  • Operating System
    Windows 10 x64 Pro build 21H1
    Computer type
    Laptop
    Manufacturer/Model
    Dell Latitude E5470
    CPU
    Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz, 2501 Mhz, 2 Core(s), 4 Logical Processor(s)
    Motherboard
    Dell
    Memory
    16 GB
    Graphics card(s)
    Intel(R) HD Graphics 520
    Sound Card
    Intel(R) HD Graphics 520 + RealTek Audio
    Monitor(s) Displays
    Dell laptop display 15"
    Screen Resolution
    1920 * 1080
    Hard Drives
    Toshiba 128GB M.2 22300 drive
    INTEL Cherryvill 520 Series SSDSC2CW180A 180 GB SATA III SSD
    PSU
    Dell
    Case
    Dell
    Cooling
    Dell
    Mouse
    Logitech MX Master (shared) | Dell TouchPad
    Keyboard
    Dell
    Internet Speed
    AT&T LightSpeed Gigabit Duplex
    Browser
    Edge Chromium | Chrome | Firefox Nightly | Brave
    Antivirus
    Defender + MB4

dbartenstein

Active member
Local time
8:29 AM
Posts
46

My Computers

System One System Two

  • Operating System
    Win 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Acer AN515-54
    CPU
    Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz 2.40 GHz
    Memory
    16GB
    Graphics Card(s)
    Nvidia 1650
    Monitor(s) Displays
    Acer CB272D
    Screen Resolution
    1920x1080
    Hard Drives
    256GB and 1T SSD
    Keyboard
    Logitech K375S
    Mouse
    Logitech M510
    Internet Speed
    250MB
    Browser
    Edge
    Antivirus
    Malwarebytes
  • Operating System
    Win 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell E6430
    CPU
    Intel(R) Core(TM) i7-3540M CPU @ 3.00GHz 3.00 GHz
    Memory
    16 GB
    Graphics card(s)
    Intel HD Graphics 4000, NVIDIA NVS 5200M
    Screen Resolution
    1366x768
    Antivirus
    Malwarebytes

ThrashZone

Active member
Member
VIP
Local time
7:29 AM
Posts
261
I have learnt my lesson about MS, as soon as I install Windows, disabling this junk is part of my routine:
Code:
fsutil behavior set disableencryption 1
cipher /d /s:C:\
reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "1" /f
sc config BDESVC start= disabled
sc config "EFS" start= disabled


What is the point of the whole disk encryption? I encrypt important files, more than once actually.

LoL, that is like jumping out of a plane and then finding out, that they forgot to give you a parachute.
Encryption is a double edge sword, just like 2FA, once you are locked out, your life can be ruined, literally.
I have seen people loosing jobs, diploma, even family photos, because of those. And there are worse cases.
Hi,
Thank you saved :cool:

Pretty much why I've always installed I legacy mode make sure that crapware doesn't work.
 

My Computer

System One

  • Operating System
    Win-7-10-11 Linux-Mint Cinnamon 20.2
    Computer type
    PC/Desktop
    Manufacturer/Model
    asus/ one old acer
    CPU
    10900k & 9940x & 5930k & q9550
    Motherboard
    z490-Apex & x299-Apex & x99-Sabertooth & Acer WG43M
    Memory
    2x8gb & 4x8gb 3600c16 & 4x8gb 3200c14 & 4x2gb
    Graphics Card(s)
    Titan Xp & 1080ti FTW3 & evga 980ti
    Sound Card
    Onboard Realtek
    Monitor(s) Displays
    1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
    Screen Resolution
    1080-1920 not sure what the t.v is besides 43" class
    Hard Drives
    To many to list
    PSU
    1000p2 & 1200p2 & 850p2 & 750p2
    Case
    D450x2 & Test benchx2
    Cooling
    Custom water loops x3
    Keyboard
    G710+x3
    Mouse
    Redragon x3
    Internet Speed
    giga xfinity
    Browser
    Firefox
    Antivirus
    mbam pro

ThrashZone

Active member
Member
VIP
Local time
7:29 AM
Posts
261
I have learnt my lesson about MS, as soon as I install Windows, disabling this junk is part of my routine:
Code:
fsutil behavior set disableencryption 1
cipher /d /s:C:\
reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "1" /f
sc config BDESVC start= disabled
sc config "EFS" start= disabled


What is the point of the whole disk encryption? I encrypt important files, more than once actually.

LoL, that is like jumping out of a plane and then finding out, that they forgot to give you a parachute.
Encryption is a double edge sword, just like 2FA, once you are locked out, your life can be ruined, literally.
I have seen people loosing jobs, diploma, even family photos, because of those. And there are worse cases.
Hi,
That script you posted holy crap cmd showed it was decrypting a bunch of stuff :eek:
 
Last edited:

My Computer

System One

  • Operating System
    Win-7-10-11 Linux-Mint Cinnamon 20.2
    Computer type
    PC/Desktop
    Manufacturer/Model
    asus/ one old acer
    CPU
    10900k & 9940x & 5930k & q9550
    Motherboard
    z490-Apex & x299-Apex & x99-Sabertooth & Acer WG43M
    Memory
    2x8gb & 4x8gb 3600c16 & 4x8gb 3200c14 & 4x2gb
    Graphics Card(s)
    Titan Xp & 1080ti FTW3 & evga 980ti
    Sound Card
    Onboard Realtek
    Monitor(s) Displays
    1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
    Screen Resolution
    1080-1920 not sure what the t.v is besides 43" class
    Hard Drives
    To many to list
    PSU
    1000p2 & 1200p2 & 850p2 & 750p2
    Case
    D450x2 & Test benchx2
    Cooling
    Custom water loops x3
    Keyboard
    G710+x3
    Mouse
    Redragon x3
    Internet Speed
    giga xfinity
    Browser
    Firefox
    Antivirus
    mbam pro

Try3

Member
Member
VIP
Local time
1:29 PM
Posts
97

My Computer

System One

  • Operating System
    Windows 11 Home x64 Version 21H2 Build 22000.194

Ghot

Well-known member
Power User
VIP
Local time
8:29 AM
Posts
1,259
Location
PA, USA
Treat anything in that article with suspicion. Its author has been known to publish deliberately-fabricated information.

Best of luck,
Denis


I treat everything that's said on the internet... with suspicion.
Just thought it might help with the issue.
That there might be "something" in there, that might put the OP on the right track.

H*ll, I don't even trust Microsoft. :)
 
Last edited:

My Computers

System One System Two

  • Operating System
    Win 10 Home 10.0.22000.282 (x64)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    (onboard) Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    LG GH22LS30 CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    COOLER MASTER ATCS 840 Full Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    100/100
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security 2020
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot®
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    100/100
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?

    http://www.xtremesystems.org/forums/showthread.php?183088-5000-B-E-on-M2N32-SLI-Dlx-Overclocked&p=2891724#post2891724
Top Bottom