In addition to encrypting the Operating System drive or fixed data drives on a computer system you may also want to encrypt removable drives attached to your computer as well.  To do this, follow the below steps.

Prerequisites

  • MBAM Client installed
  • MBAM GPO Applied

Encrypting a removable drive

  1. Attach the removable drive to the computer.

  2. Open a windows explorer window and locate the removable drive.

  3. Right-click on the removable drive and select Turn on BitLocker…

  4. You should then see a Starting BitLocker screen.

  5. After the drive is initialized you will be prompted with a Choose how you want to unlock this drive screen.  Check the Use a password to unlock the drive box and enter a password into the provided boxes.

  6. You will then be presented with a How do you want to store your recovery key? Screen.  Select Save the recovery key to a file (on your H: drive for example) and then after saving the file, click Next.

    If you are using Windows 8.1 you will then be presented with a Choose how much of your drive to encrypt screen.  Choose the best option according to the recommendations on screen and click Next.

  7. You will then see a Are you ready to encrypt this drive? Screen.  Click Start Encrypting.

  8. The encryption process will then begin.  The amount of time it will take will vary depending on the size of the drive.

  9. When the process is complete you should see a screen indicating that encryption is complete.

  10. After the encryption is complete, it is recommended that you backup your recovery again in the event that you forget your password.  Depending on the state of the MBAM agent, it may generate a new key that is different from the one you generated in step 6.  To do this, go into the Control Panel and click on BitLocker Drive Encryption.

  11. If you are using Windows 7, locate the removable drive under the BitLocker Drive Encryption – BitLocker To Go section and click Manage BitLocker.  If you are using Windows 8.1 skip to step 14.

  12. On the Select options to manage screen click Save or print recovery key again.

  13. You will then be presented with the same screen as in Step 6.  If this key is different from the 1st key you saved, this second key will be your actual recovery key and will be stored on the MBAM server at https://uibitlocker.iowa.uiowa.edu/.  If this key is the same as the key you saved in Step 6 then the key is not stored on the MBAM server and you should save and store this key file in a safe location (your H: drive for example).  Skip to step 17.

  14. For Windows 8.1, locate the Removable data drives – BitLocker To Go and click on the removable drive to expand the options.

  15. From the available options click Backup up your recovery key.

  16. You will then be presented with the same screen as in Step 6.  If this key is different from the 1st key you saved, this second key will be your actual recovery key and will be stored on the MBAM server at https://uibitlocker.iowa.uiowa.edu/.  If this key is the same as the key you saved in Step 6 then the key is not stored on the MBAM server and you should save and store this key file in a safe location (your H: drive for example).

  17. Once the removable drive is encrypted, when the drive is detached and either re-attached to the same computer or attached to a different computer, you will be prompted for the password you entered in step 5.  You will also have the option to automatically unlock the drive on that particular computer.  For Windows 7:

    For Windows 8.1:

  18. In the event that you forget the password that was set in step 5, for Windows 7, click the I forgot my password link.

    For Windows 8.1, click More options

  19. You can then enter the 48 digit key that you saved before. For Windows 7:

    For Windows 8.1:

  20. If you lose the password and the recovery key, go to https://uibitlocker.iowa.uiowa.edu/and use the Key ID to recover your recovery key.

Article number: 
103547
Last updated: 
March 26, 2024