How to enable BitLocker on VMware Virtual Machine without TPM?

Enabling BitLocker encryption on a virtual machine is similar to doing so on a physical computer, but it requires consideration of virtualization environment specifics. Additionally, the performance and storage capabilities of the virtual machine may impact the encryption process when enabling BitLocker in a virtualized environment.

Part 1: Limitations for Using BitLocker on VM:

1. Ensure that the virtual machine's operating system version supports BitLocker.

2. Ensure that the virtual machine is running in a virtualization environment that supports BitLocker, such as Hyper-V, VMware Workstation, VirtualBox, etc.

3. Ensure that the virtual machine's hard disk has sufficient space for BitLocker encryption. The BitLocker encryption process requires adequate space to store encrypted data.

Part 2: TPM preparation for VMware BitLocker Encryption:

Method 1: Use VMware settings to add a TPM module

As Windows 11 must work on TPM 2.0, so you won’t be able to successfully installed Windows 11 Virtual Machine unless you add a TPM module. And without TPM, you may encounter the error prompt as follows. Here’s how to add it:

Step 1 Right-click on Windows 11, Select "Settings" from the menu.

Step 2 Click on "Add" button.

Step 3 Select "Trusted Platform Module", then "Finish".

Step 4 Press "<Win + R >", type "tpm.msc" in the text box, and then press Enter to check if TPM is ready for use. Boot the computer, start the BitLocker Drive Encryption.

Method 2: Modify the Group Policy

If you’ve bypass the TPM verification when installing Windows 11, by updating the Group Policy, you can Turn On BitLocker for Operating System Drive Without Tpm. Follow the guidance in the linked article to achieve it.

Part 3: Fixed BitLocker drive encryption detected bootable media error

If the following error message occurs, use the following steps to resolve it:

Step 1 Right-click on "Windows 11", then select "settings".

Step 2 Click "CD/DVD", then tap the "remove" button.

Step 3 Reboot the laptop, retry to enable BitLocker Encryption.

Part 4: How to enable BitLocker on Virtual Machine Windows 11?

Step 1 Type "Control Panel" in the search box, and press "Enter". In the "View by" option, select "Large icons", then choose BitLocker Drive Encryption.

Step 2 Select the drive to encrypt, click "Turn on BitLocker".

Step 3 Choose encryption options, such as using a password for protection.

Step 4 Click "Next", then "Save to file" or "Print password" to back up the recovery key.

Step 5 Follow the guidance to go on BitLocker Encryption, until restart to run the system check. After completing the wizard, the system will begin encrypting the drive. This process may take some time, so please be patient.

Note: Remember to back up the recovery key file in a safe location.

Part 5: Manage VM BitLocker

In VM, you can Manage BitLocker by "Control Panel" > "System and Security" > "BitLocker Drive Encryption", including settings like "Suspend protection", "Back up recovery key", "Turn off BitLocker".