Systems up or down

 

BitLocker

emails flying from laptop

BitLocker is the Windows encryption technology that protects your device from unauthorised access by encrypting your drive. BitLocker uses your Windows login to secure your data. When you are logged in, your files look just like they would otherwise, and when you log out, everything is secured. BitLocker will not affect the performance of your computer. 

When would I require the BitLocker key?

You may be prompted to provide a BitLocker recovery key when you make changes in hardware, firmware, or software which BitLocker cannot distinguish from a possible attack. In these cases, BitLocker may prompt for the recovery key even if the user is an authorised owner of the device. Such activities might be:

  • Updating the system’s UEFI/BIOS
  • Changing Secure Boot settings
  • Significant hardware modification (removal or addition of hardware)
  • Installing a Windows update that updates UEFI or TPM settings on device

How do I know if BitLocker is enabled on my device?

You can determine if Bitlocker is enabled by launching Explorer and checking if your drive has a padlock as shown in this diagram:BitLockerEnabled.png

How do I backup the BitLocker recovery key?

University owned Windows devices have Bitlocker enabled and it is managed by UniSA. You are not required to take steps to backup the BitLocker key on a blue plated device. If you are prompted for a recovery key on a UniSA managed devices please contact ITHelpdesk@unisa.edu.au

If BitLocker is activated your personally owned Windows device, it's important to be sure you have the Recovery Key backed up somewhere. If BitLocker thinks an unauthorized user is trying to access the drive it will lock the system and ask for the BitLocker recovery key.

On a personally owned device you can follow these Microsoft instructions to Backup your Bitlocker recovery key

How do I retrieve the BitLocker recovery key?

On personally owned devices the recovery key may be stored in different locations depending on how the device was setup or how Bitlocker was enabled.

Here are some options to finding your BitLocker recovery key on a personal device:

  • Refer to Microsoft support page on Finding your Bitlocker recovery key
  • You may have printed your recovery key when BitLocker was activated - Look where you keep important papers related to your computer.
  • On a USB flash drive - Plug the USB flash drive into your locked PC and follow the instructions. If you saved the key as a text file on the flash drive, use a different computer to read the text file.

If you used your UniSA staff or student account to log into your own device or log into Office 365 app on your own device, your recovery key may be stored in the organisation account. Follow the steps below to retrieve the recovery key:

  • Open a browser on another device and go to https://www.office.com
  • Click Sign in, located top right
  • Enter your UniSA email address and click Next
  • Enter your UniSA username, password and click Sign in
  • Click Yes to Stay signed in
  • Click on your initials located top right and select view account
  • Click on Devices
  • Locate the device you are looking for and click View Bitlocker Keys
  • Click on Show recovery key
  • Refer to Microsoft Support page: Manage your work or school account connected devices for detailed instructions

Note: If the device was set up, or if BitLocker was activated by another user on the device, the recovery key may be stored in that person’s Microsoft account. 

See How do I disconnect my device from UniSA account? for instructions on removing the UniSA linked account from your personally owned device.

Link to this page What is BitLocker? 

emails flying from laptop

If you have used your UniSA account to access Office365 on your personal device, you may have opted to allow your device to receive some management policies from UniSA. To remove your device from receiving any UniSA management settings you can do the following:

  • From the Start  menu click on the Settings cog
  • Choose Accounts
  • Click on Access work or school
  • Select the account you wish to remove, then select Disconnect.
    disconnectADAccount.png
  • Select Yes to confirm your actions.

Note: This will not delete the account entirely, it will just remove access from your PC. If an account is either the only account on the PC or the primary account on the PC, it can't be removed. 

Link to this page: How do I disconnect my device from UniSA account?