Configuring a BitLocker Encryption Policy
R81 Harmony Endpoint Server Administration Guide|210
8. Click Yes.
Two actions remain: Encryption Engine and Access Management.
9. Edit the BitLocker Management policy: Click Use BitLocker Management and select
Edit Shared Action.
10. Configure these settings:
Setting Options
Initial encryption type
n
Encrypt entire drive
- Recommended for computers
that are in production and already have user data,
such as documents and emails.
n
Encrypt used disk space only
, to encrypt only the
data. Recommended for fresh Windows
installations.
Drives to encrypt
n
All drives
- Encrypt all drives and volumes.
n
OS drive only
- Encrypt only the OS drive (usually
C:\). This is the default.
Encryption algorithm
n
Windows Default
- This is recommended. On
Windows 10 Build 1507 or later, unencrypted disks
are encrypted with XTS-AES-128. On encrypted
disks, the encryption algorithm is not changed.
n
XTS-AES-128
n
XTS-AES-256
11. Click OK.
12. Click Next.
13. In the Enter rule name and comment page, fill in the details.
14. Click Finish.
To Next Page