Bits of .NET

🔒 BitLocker = Data Encryption

Data theft is real. BitLocker encrypts your drives. Protect sensitive data, secure your PC.

📝 BitLocker Setup

# Requirements
- Windows 11 Pro/Enterprise
- TPM (Trusted Platform Module)
- UEFI with Secure Boot

# Enable BitLocker
1. Search: "BitLocker"
2. Open "Manage BitLocker"
3. Click "Turn on BitLocker"
4. Choose unlock method:
   - Password
   - Smart card
   - USB key
5. Save recovery key:
   - Microsoft account
   - USB drive
   - File
   - Print
6. Choose encryption:
   - Used space only (faster)
   - Full drive (slower)
7. Choose encryption mode:
   - New mode (best)
   - Compatible mode
8. Run system check
9. Restart

# Manage BitLocker
- Suspend protection (for updates)
- Resume protection
- Change password
- Save recovery key
- Turn off BitLocker

🎯 Advanced Settings

# Group Policy (for admins)
1. gpedit.msc
2. Computer Configuration → Administrative Templates → Windows Components → BitLocker Drive Encryption

# Key policies:
- Choose default drive encryption method
- Configure recovery password
- Enable/disable BitLocker
- Require TPM
- Configure USB startup keys

# Command Line
manage-bde -status
manage-bde -on C: -rp -num 256
manage-bde -off C:

# PowerShell
Enable-BitLocker -MountPoint C:
Suspend-BitLocker -MountPoint C:
Resume-BitLocker -MountPoint C:
Get-BitLockerVolume

# Recovery Key
- Store in Azure AD
- Store in Active Directory
- Save to file
- Print backup
- Store in Microsoft Account

# Best Practices
- Always save recovery key
- Use strong password
- Keep recovery key secure
- Regular backup
- Test recovery process

✅ Security Tips

• ✓ Enable TPM in BIOS
• ✓ Back up recovery key
• ✓ Use strong password
• ✓ Suspend for firmware updates
• ✓ Test recovery process