Windows 8: BitLocker (TPM)

Enabling Bitlocker on a Windows 8 Machine with a TPM Chip

Step 1: Restart the computer. When the Dell logo appears, tap the "F2" key until the message "Entering Setup" appears. This will bring you to the BIOS menu.

 Enter Dell BIOS

Step 2: Open the "Security" folder and navigate to the "TPM Security" file.

Note: Some versions of BIOS do not allow you to navigate with a mouse or touchpad. If this is the case, use the arrow keys and the enter key on your keyboard to navigate and select.

Note: The following screen shots show the BIOS of a Dell Latitude D630 laptop. Your computer's BIOS may look very different, but the concepts and locations should all be the same.

 BIOS TPM Security

Step 3: If the checkbox next to "TPM Security" is already checked, skip to step 6. If it is not, check the checkbox next to "TPM Security" and select the "Apply" button. Select the "Yes" button when it asks if you want to save the changes, then select the "Exit" button.

 BIOS TPM Security Checkbox

Step 4: Restart the computer. Re-enter the BIOS menu by tapping the "F2" key when the Dell logo appears until the message "Entering Setup" appears.

Step 5: Navigate back to the "TPM Security" file under the "Security" folder.

Step 6: If the radio button next to "Activate" is already selected, move to step 8. If it is not, select the radio button next to "Activate" and select the "Apply" button. Select the "Yes" button when it asks if you want to save the changes, then select the "Exit" button.

 BIOS Activate TPM Security

Step 7: Restart the computer. Re-enter the BIOS menu by tapping the "F2" key when the Dell logo appears until the message "Entering Setup" appears.

Step 8: Open the "General" folder and navigate to the "Boot Sequence" file.

 BIOS Boot Sequence

Step 9: Ensure that "Internal HDD" is above "USB Storage Device" in the Boot Sequence list. If it is not, select the item in the list and use the arrow buttons beside the list to move the selected item up or down the list.

 BIOS HDD Above USB Boot Order

Step 10: Select the "Apply" button, select "Yes" if it asks you to save any changes, then select the "Exit" button. Allow Windows to start normally.

Step 11: Log on to Windows using an NAU domain account with administrator privileges on the computer.

Step 12: Press the "Windows" key to open the start menu. Type "Control Panel" and click on the "Control Panel" application that appears.

 Windows 8 Control Panel Search

Step 13: Click "System and Security".

 Control Panel System and Security

Step 14: Click "Bitlocker Drive Encription".

 System and Security Bitlocker Drive Encryption

Step 15: Click "Turn on Bitlocker".

 Windows 7 Turn On Bitlocker

Step 16: You will be given the opportunity to save the recovery key. The key will automatically be sent to an NAU database, but you may also select any of the given options if you would like a personal backup key.

Note: If you choose to create a backup key, keep it somewhere safe and secure. It should not be kept near the computer it unlocks.

 Windows 7 Bitlocker Store Recovery Key

Step 17: Click the "Next" button. The encryption process will begin initializing.

Step 18: Once the initialization process is complete, a new window will appear. Click the "Start Encrypting" button to begin the encryption process.

Note: The encryption will likely take several hours to complete. The computer may be used as normal during this time. If the computer is shut down, the encryption process will pause until the computer is turned on again.

 Windows 7 Bitlocker Start Encrypting



top

Related Services

Not available to students Available to facultyAvailable to staff

Windows Bitlocker encryption for NAU domain joined laptops.

top