Skip to content Skip to site navigation Skip to service navigation

What should an IT professional know about encrypting multiple fixed disks?


  • For Windows, we can only escrow BitLocker recovery keys for the system volume. Any additional volumes encrypted using BitLocker need to have their recovery keys manually recorded, by saving them to a removable drive, or printing them out, or writing them down.
  • For Windows, be sure BitLocker is configured to be unlocked automatically.
  • Be sure your computer is being backed up before encrypting.

Multi-boot systems in the general case cannot be encrypted. Unofficial instructions for encrypting Apple Boot Camp devices can be found on the web, but the steps are many and complicated. For most purposes, it's almost always preferable to run additional operating systems in a virtual machine. If a system must remain multi-boot, the user should request a compliance exception.


Mac OS:

Last modified September 15, 2016