Indicates the encryption algorithm and key size used on the volume. Indicates the status of the encryption or decryption on the volume. Removes the external key saved on the currently running operating system volume so that the volume is not automatically unlocked when it is mounted.ĭisables all key protectors associated with this volume.Īllows a data volume to be automatically unlocked when the volume is mounted.īegins encryption of a fully decrypted volume or resumes encryption of a partially encrypted volume.īegins encryption of a fully decrypted volume after a hardware test.Įnumerates all certificates on the system that match the indicated criteria and returns a list of thumbprints. Removes all external keys and related information saved onto the currently running operating system volume that are used to automatically unlock data volumes.īegins decryption of a fully encrypted volume or resumes decryption of a partially encrypted volume.ĭeletes a given key protector for the volume.ĭeletes all key protectors for the volume. Uses the new passphrase to obtain a new derived key.Ĭhanges a PIN associated with an encrypted volume. Saves all external keys and related information that is needed for recovery to the Active Directory.Ĭhanges the external key associated with an encrypted volume. MethodīackupRecoveryInformationToActiveDirectory The Win32_EncryptableVolume class has these methods. The Win32_EncryptableVolume class has these types of members: You can use the GetConversionStatus and GetProtectionStatus methods to check on the status of an accessible volume. If the computer turns off while encryption is in progress, encryption will automatically resume when the computer restarts. Key protectors must be added prior to starting the encryption, or else you must use the DisableKeyProtectors method to expose an unprotected clear key. Use the Encrypt or EncryptAfterHardwareTest method to begin encryption.
For more information, see the Win32_Tpm WMI provider class. For TPM-based key protectors, you may first need to properly initialize the TPM. External keys and numerical passwords can provide authentication during recovery scenarios. To protect the volume's encryption key, add key protectors by using these methods:Įach type of key protector provides a different authentication experience for unlocking access to the encrypted data. To realize the benefits of BitLocker, you must specify a protection method for the volume's encryption key and then fully encrypt the volume. It can be a volume that contains an operating system, or it can be a data volume on the local disk. The Win32_EncryptableVolume WMI provider class represents an area of storage on a hard disk that can be protected by using BitLocker Drive Encryption.
0 kommentar(er)
