Salta al contenuto principale

how to save (and restore) a bitlocker encrypted disk

Thread needs solution

bonjour

je suis en windows 11 (depuis peu) et j'utilise le cryptage standard bitlocker sur mes 2 ssd.

 

je fais des sauvegardes systeme avec Acronis TI 2021. Ca marche sans problème.

 

Mais comment faire si je dois restaurer un jour ?

 

J'ai vraiment besoin de conseils

 

merci

0 Users found this helpful

hello

I'm on windows 11 (recently) and I use bitlocker standard encryption on my 2 ssds.
I make system backups with Acronis TI 2021. It works without problem.
But what if I have to restore one day?
I really need advice

Marcel, welcome to these public User Forums.

I am assuming that you are creating your backups using ATI 2021 from within Windows when your BitLocker encryption is already unlocked, and in which case, the backup does not contain any encryption unless you have used the Acronis encryption option when creating the backup task!

To recover the above backups, you would need to either start with a new target disk drive that is not encrypted or else use BitLocker commands to unlock the target drive after booting from Acronis rescue media by using manage-bde -unlock

If you create the 'Simple' version of the ATI 2021 rescue media, and do this on Windows 10 Pro which has BitLocker support, then this is included in the rescue media but there are some steps that are needed in order to access a BitLocker encrypted drive in the rescue environment.

When you boot into the rescue environment, you will see a black Command prompt window along with the main ATI 2021 application window.  You need to close the ATI 2021 window in order to have access to the command prompt in the black window.

Now, you can use the BitLocker commands to identify and unlock your encrypted drive before relaunching the ATI 2021 application again using "X:\Program Files\Acronis\TrueImageHome\trueimage_starter.exe"

See the following data captured from my own system booted from the ATI 2021 Simple rescue media with an encrypted drive connected.

X:\windows\system32>wpeinit

X:\windows\system32>"X:\Program Files\Acronis\TrueImageHome\trueimage_starter.exe"
Terminate batch job (Y/N)? n

X:\windows\system32>manage-bde -status

BitLocker Drive Encryption: Configuration Tool version 10.0.19041
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Disk volumes that can be protected with
BitLocker Drive Encryption:
Volume C: [Windows]
[Data Volume]

    Size:                 200.83 GB
    BitLocker Version:    None
    Conversion Status:    Fully Decrypted
    Percentage Encrypted: 0.0%
    Encryption Method:    None
    Protection Status:    Protection Off
    Lock Status:          Unlocked
    Identification Field: None
    Automatic Unlock:     Disabled
    Key Protectors:       None Found

Volume D: [SSD-Data]
[Data Volume]

    Size:                 263.29 GB
    BitLocker Version:    None
    Conversion Status:    Fully Decrypted
    Percentage Encrypted: 0.0%
    Encryption Method:    None
    Protection Status:    Protection Off
    Lock Status:          Unlocked
    Identification Field: None
    Automatic Unlock:     Disabled
    Key Protectors:       None Found

Volume L: [Label Unknown]

[Data Volume]

    Size:                 Unknown GB
    BitLocker Version:    2.0

    Conversion Status:    Unknown
    Percentage Encrypted: Unknown%
    Encryption Method:    AES 128
    Protection Status:    Unknown
    Lock Status:          Locked
    Identification Field: Unknown
    Automatic Unlock:     Disabled
    Key Protectors:
        Password
        Numerical Password

Volume H: [Data]
[Data Volume]

    Size:                 114.10 GB
    BitLocker Version:    None
    Conversion Status:    Fully Decrypted
    Percentage Encrypted: 0.0%
    Encryption Method:    None
    Protection Status:    Protection Off
    Lock Status:          Unlocked
    Identification Field: None
    Automatic Unlock:     Disabled
    Key Protectors:       None Found

X:\windows\system32>manage-bde -unlock L: -password
BitLocker Drive Encryption: Configuration Tool version 10.0.19041
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Enter the password to unlock this volume:
The password successfully unlocked volume L:.

X:\windows\system32>dir L:
 Volume in drive L is Seagate250gb
 Volume Serial Number is 1052-D550

 Directory of L:\

07/11/2020  00:08    46,379,683,840 MyBackup(1).tibx
05/11/2020  00:51    45,030,981,632 MyBackup.tibx
               2 File(s) 91,410,665,472 bytes
               0 Dir(s)  158,538,076,160 bytes free

X:\windows\system32>"X:\Program Files\Acronis\TrueImageHome\trueimage_starter.exe"

X:\windows\system32>

If you create the Acronis 'Simple' rescue media, this should automatically include BitLocker support from the Windows Recovery Environment.

See KB 65508: Acronis True Image 2021: how to create bootable media and KB 59877: Acronis True Image: how to distinguish between UEFI and Legacy BIOS boot modes of Acronis Bootable Media

KB 65539: Acronis True Image 2021: How to restore your computer with WinPE-based or WinRE-based media