If the feature isn't available, check the computer manufacturer for the Basic Input Output System (BIOS) or Unified Extensible Firmware Interface (UEFI) update.

Computer firmware must support TPM or USB devices during startup.

BitLocker is available without TPM using software-based encryption, but it requires some extra steps for additional authentication.

This is a special chip that enables the device to support advanced security features.

A Trusted Platform Module (TPM) chip is needed for the best result.

Windows 10 Home edition has its version of BitLocker on select devices.

BitLocker Drive Encryption is available on Windows 10 Pro and Enterprise.

This time you do need to be specific in pointing to the file on the USB key (whereas saving the key to the USB-drive does not require you to be specific folder/filename).Īs stated in the comments below, you can also unlock the drive with the mouse using the blue links in the bitlocker-corner-popup. You can add, however, a task in task scheduler, resulting in this behaviour.

You cannot 'teach' windows to use the keyfile to autounlock the Data drive. Bitlockers own autounlock-mechanism will add an external key file into the registry of Windows if you enable it, but this is only available if the system drive is encrypted. The RecoveryKey (-rk) or StartupKey (-sk) puts an external key file on the USB drive F.Īdd -UsedSpaceOnly to speed up encryption.įor an already encrypted drive: Manage-bde D: -protectors -add -RecoveryKey F:Īfter you have successfully added an external keyfile protector to the Data drive, Windows will not automatically unlock the Data drive when the USB key is detected.

Open a cmd window with admin rights (winkey + x)įor a new drive: manage-bde -on D: -RecoveryKey F: -RecoveryPassword -UsedSpaceOnlyĪ RecoveryPassword (-rp) consisting of a long numerical code is displayed for you to copy to a safe place and to be used if you loose your USB key. You cannot achieve this without command prompt or powershell.

Encrypt usb drive windows 10