What happens to BitLocker encryption after disabling Full Disk Encryption?

[faust]

Hi CheckMates,

I have a question regarding the interaction between BitLocker and Harmony Endpoint Full Disk Encryption (FDE) on Windows devices.

Scenario:

• A Windows device was originally encrypted using BitLocker.
• Later, we enabled Full Disk Encryption (FDE) via Harmony Endpoint (EPMAAS).
• According to documentation, Harmony FDE can take over management of BitLocker.

If we later disable the Full Disk Encryption policy in Harmony Endpoint, what happens to the disk encryption status on the device? Will the disk be decrypted after disabling FDE or will BitLocker management be handed back to the device, and the disk remain encrypted with BitLocker?

I want to understand if disabling FDE will leave the device unencrypted, or if BitLocker will continue to protect the disk as before.

[the_rock · Accepted solution]

Im fairly sure BitLocker would protect the device, as before, if you disable FDE.

[the_rock]

@faust To be sure, I would definitely open TAC case to get an official answer.

[faust]

Thanks for the tip — much appreciated!

[the_rock]

Of course, any time!

[lluner · Accepted solution]

@faust 

In my tests, the interesting thing is whether you use BitLocker or FDE. I've had problems with BitLocker enabled, and when I tried to remove the endpoint, it caused problems with the operating system on Windows 11. Therefore, if you're going to use FDE, disable BitLocker and be careful when removing the antivirus with BitLocker enabled; I don't know how the new version 89 works.