How to enable BitLocker for system drive?

Certainly, I will provide you with a detailed explanation about your question.

BitLocker drive encryption is a feature that can better protect the data stored on the Windows OS. BitLocker can automatically recognize the built-in drive including system drive by default.

You can also encrypt a USB flash drive with BitLocker, by simple insert your USB flash drive into the pc. And its encryption process is similar to that of the system drive’s. However, it’s worth noting that you cannot encrypt a network drive with BitLocker. You can explore other methods to encrypt a network drive.

The Differences between Drives

The system drive is the drive where the operating system is installed. It contains core files and programs of the operating system. Typically, the term "system drive" refers to the C: drive. Other drives, like the D: drive or E: drive, used for storing user data files, are not considered as system drives.

A USB flash drive is a portable storage device usually connected to a computer via a USB port. They are used for storing and transferring files between different computers. While a network drive is a storage device connected to a computer via a network. It can be a file server within a local area network.

Enable Drive BitLocker Encryption for System Drive

Like "Enable BitLocker for fixed data drive on Windows 10/11" to utilize system tools to encrypt your system drive. The steps to enable BitLocker for System drive are as follows:

Step 1 Type "Manage BitLocker" in the search box, and then press Enter to access to BitLocker Drive Encryption Panel.

Step 2 Click on the "Turn on BitLocker" option besides the System drive.

Step 3 Choose BitLocker unlock method, such as USB flash drive, and Password.

Step 4 Take password as reference, enter your BitLocker password twice to enable BitLocker password protection.

Step 5 Backup your BitLocker Recovery Key to a safe place, such as Microsoft Account/USB flash drive, save it to a file or print it.

Step 6 Choose BitLocker Encryption type, as described in the picture, "Encrypt used disk space only" is faster but not secure enough, while "Encrypt entire drive" is the opposite.

Step 7 Then choose which BitLocker encryption mode to use, "New encryption mode" or "Compatible mode".

Step 8 Here, the "Run BitLocker system check" is optional, but doing this can ensure BitLocker function works properly.

Step 9 Restart your computer to finish the BitLocker system check. When restart, the computer will display BitLocker Blue Recovery Screen to prompt you to enter BitLocker password.

Step 10 After restart, the system will automatically begin the BitLocker Encryption for system drive. Just wait patiently for the process to end.

Step 11 Now you’ve already enabled BitLocker for your system drive. And there’re more options for you to manage your BitLocker Encryption settings.

However, when you attempt to encrypt your system drive, you may encounter error message – "This device can’t use a Trusted Platform Module", that means your pc doesn’t meet BitLocker’s requirement. In this situaion, you can refer to turn on BitLocker for operating system drive without Tpm to make some alteration to your system and retry the encryption steps above. Otherwise choose to transfer and encrypt your important data to another user data drive.

Conclusion

You must be very cautious when using BitLocker to encrypt the system drive. Because this operation carries certain risks. If something goes wrong during encryption process, it can cause system crashes and loss of important data files.

Personally speaking, encrypt the data on a USB flash drive with BitLocker will be a terrific choice, as it's more portable – you can connect it to any computer that supports BitLocker and then access your encrypted data conveniently.