Encrypt a Windows Computer with BitLocker

Stage 1: Check if your computer has already been encrypted

If your computer is already encrypted, don't encrypt again. To check if your computer has already been encrypted, follow the instructions on the UBC IT Knowledge Base.

Stage 2: Back up your computer

Windows 8

To back up your system in case of drive failure during encryption, follow these steps:

1. Ensure your PC is plugged into a power source.
2. Connect the external hard drive to your PC using the USB cable.

3. Click Start, type “file history”, and select ‘file history’.
    

   

    

4. Select ‘System Image Backup’ in the bottom left hand corner of the File History window.
5. A new window will open. Select ‘Create a system image’ in the upper left side of the window.

6. Select ‘on a hard disk’ and select your external hard drive as the location to save the backup. Click ‘Next’.

   

    

7. Add any additional hard drives to the list if you have any (default is none). Click ‘Next’.
8. Click ‘Start backup’. Do not turn off your computer until the process completes. The backup may take several hours depending on the size of your data.
9. Once the backup is complete, it is helpful to create a System Repair disc, if you can. You will be prompted to create one. Click ‘Yes’ to create a disc, ensure a blank CD / DVD is in the optical drive and click ‘Create Disc’.

Windows 10

To back up your system in case of drive failure during encryption, follow these steps:

1. Ensure your PC is plugged into a power source.
2. Connect the external hard drive to your PC using the USB cable.

3. Click Start, type “backup”, and select ‘Backup and Restore (Windows 7)’ or ‘Backup settings’.
    

   
   

4. If you navigated to the Backup Settings page – click on ‘Go to Backup and Restore’.
    

   

5. A new window will open. Select ‘Create a system image’ in the upper left side of the window.
    

   

6. Select ‘on a hard disk’ and select your external hard drive as the location to save the backup. Click ‘Next’.
    

   

    

7. Add any additional hard drives to the list if you have any (default is none). Click ‘Next’.
8. Click ‘Start backup’. Do not turn off your computer until the process completes. The backup may take several hours depending on the size of your data.
9. Once the backup is complete, it is helpful to create a System Repair disc, if you can. You will be prompted to create one. Click ‘Yes’ to create a disc, ensure a blank CD / DVD is in the optical drive and click ‘Create Disc’.

Stage 3: Enable BitLocker to encrypt your computer

Windows 8, 10

1. Ensure your PC is plugged into a power source. Unless prompted, do not turn off your PC during this process.

2. Click on the Start menu, type “Manage Bitlocker” in the search box, click ‘Manage Bitlocker’.
    

   

    

   

3. Click ‘Turn on BitLocker’. This process will complete regardless of sign-out or shutdown.
    

   

4. Choose where to save recovery key.

   1. It is highly recommended that you allow Microsoft store your recovery key using your Microsoft Account.
   2. It is recommend that you also save a copy of your recovery key to your personal network storage drive (UBC Home Drive - Vancouver; F: Drive - Okanagan), so that University IT Support Staff can assist you in the event of an incident.
   

It is recommended that you create a second recovery key and store it in a safe place off of the computer you have encrypted, preferably multiple safe places. See the options available to users to store their encryption recovery keys in the Encryption FAQ.

If turning on BitLocker fails, contact your UBC IT or your local IT Support. You may not have a TPM Chip.

How to encrypt an external USB drive using BitLocker (Windows 8, 10)

1. Insert the USB drive. Click on the Start menu, type “Manage Bitlocker” in the search box, click ‘Manage Bitlocker’.

   

     

   

2. Locate your USB drive under Removable data drives, and click ‘Turn on BitLocker’. 

   

    

3. Select the Enter a password, then enter and verify a password to access the drive.
   1. Make sure that this password is something which you will remember.

4. Choose to save or print your recovery key (whatever makes the most sense for you).
    

   

5. Select ‘Encrypt entire drive’, click ‘next’, and choose ‘Compatible mode’.
6. The drive will now encrypted. Once the dialogue box reaches 100%, the drive is ready to be removed and used elsewhere.

Go Further...

• BitLocker (and BitLocker-to-Go) for Dummies (ZDNet)
• BitLocker Drive Encryption Overview (Microsoft)