{"id":2034,"date":"2018-05-08T09:24:45","date_gmt":"2018-05-08T14:24:45","guid":{"rendered":"http:\/\/www.wildow.com\/blog\/?p=2034"},"modified":"2018-05-08T09:24:45","modified_gmt":"2018-05-08T14:24:45","slug":"windows-10-control-bitlocker-during-upgrades-from-ghacks","status":"publish","type":"post","link":"http:\/\/www.wildow.com\/blog\/?p=2034","title":{"rendered":"Windows 10: control Bitlocker during upgrades from GHacks"},"content":{"rendered":"

Windows 10: control Bitlocker during upgrades<\/h1>\n
by\u00a0Martin Brinkmann<\/a>\u00a0on May 08, 2018 in\u00a0Windows<\/a>\u00a0–\u00a0No comments<\/a><\/div>\n
\n

When you upgrade a\u00a0Windows 10 device protected by BitLocker<\/a>\u00a0to a new feature update version of Windows 10, for example from Windows 10 version 1703 to Windows 10 version 1803, BitLocker is suspended during the upgrade process.<\/p>\n

Suspension does not mean that the entire drive gets decrypted during the process; instead, it makes the encryption key available “in the clear” so that data is “available to everyone”.<\/p>\n

Data that gets written to the disk is still encrypted. A suspended BitLocker protection on a device does not run validation checks during startup. Administrators could use the\u00a0Suspend Bitlocker Powershell<\/a>\u00a0script in the past to suspend BitLocker protection, for example, before upgrading to a new version of Windows or upgrading device firmware.<\/p>\n

A security researcher\u00a0discovered a bypass option during upgrades<\/a>\u00a0to access BitLocker encrypted data.<\/p>\n

Windows 10: control Bitlocker during upgrades<\/h2>\n

\"windows<\/p>\n

Windows suspended BitLocker encryption automatically during feature upgrades to a new version.<\/p>\n

Microsoft\u00a0added<\/a>\u00a0new command line options to Windows 10 version 1803 to control BitLocker behavior during the upgrade:<\/p>\n