topic Re: BitLocker Encryption in Endpoint

BitLocker Encryption

nagaraja_cs — Tue, 10 Mar 2020 06:10:22 GMT

Hi Team,

I have enabled CheckPoint Full Disk Encryption and all the drives are completely encrypted.

Then I tried to enable Bitlocker by clicking on C:/ Drive and Turn on Bitlocker,I was getting error "Require additional authentication at startup"

Then I have enabled "Allow BitLocker without a compatible TPM" in Windows settings and tried enabling Bitlocker.

I am able to turn on BitLocker the drives are encrypted with BitLocker as well on top of Check Point FDE after the preboot authentication.

Please suggest if I am missing anything here or it is the same behavior.

Re: BitLocker Encryption

PhoneBoy — Wed, 11 Mar 2020 19:33:25 GMT

Not clear on what your goal is here.
Can you clarify?
In any case there is no reason to have both our FDE and Bitlocker enabled.

Re: BitLocker Encryption

nagaraja_cs — Thu, 12 Mar 2020 03:14:51 GMT

We need to restrict third party encryption when there is already Check Point encryption is enabled.But it is allowing third party encryption on top of Check Point encryption.

Re: BitLocker Encryption

PhoneBoy — Thu, 12 Mar 2020 19:57:10 GMT

Unfortunately, I don't think we can restrict Bitlocker--part of the operating system--from attempting to also encrypt a disk.
You can use Bitlocker encryption and manage it with Check Point, though: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163297