Hardware Encryption

BitLocker Device Encryption can help protect data on devices running Windows 7, 10, and 11.

When users travel, their organization’s confidential data goes with them. Wherever confidential data is stored, it must be protected against unauthorized access. Windows has a long history of providing at-rest data-protection solutions that guard against nefarious attackers, beginning with the Encrypting File System in the Windows 2000 operating system. More recently, BitLocker has provided encryption for full drives and portable drives.

Used disk space-only encryption
Encrypted hard drive support
Pre-boot information protection
Manage passwords and PINs
Configure Network Unlock

BitLocker is capable of encrypting entire hard drives, including both system and data drives. Additionally, BitLocker pre-provisioning can drastically reduce the time required to provision new PCs with BitLocker enabled.

With Windows 11 and Windows 10, administrators can turn on BitLocker and the TPM from within the Windows Preinstallation Environment before they install Windows or as part of an automated deployment task sequence without any user interaction.

Unlike a standard BitLocker implementation, BitLocker Device Encryption is enabled automatically so that the device is always protected.