34,333
edits
Changes
→Performing the Encryption and Generating Keys
[[Image:windows_server_2008_bitlocker_startup_preferences.jpg|The Windows Server 2008 BitLocker startup preferences screen]]
Select the desired option to move to the next step. If using a USB startup key insert a removable USB memory device into a USB port when prompted to do so and click ''Save'' to save the Startup key to the device.
Next, the setup process will request that you save a recovery key. This will be required to unlock the system if Bitlocker detects a problem with the integrity of the system (typically if the data on the disk has been tampered with while the system was shutdown):
[[Image:windows_server_2008_bitlocker_recovery_password.jpg|Saving the BitLocker Recovery Password]]
Do not save the recovery password on the same USB device as the startup key, but instead insert a different device. It also recommended that multiple copies of the password be kept so it also recommended that the password be printed out and kept safely on file. Once the recovery password has been saved click ''Next'' to proceed. On the final screen make sure the ''Run BitLocker system check'' toggle is set and click ''Continue'' to begin the encryption process. The system will restart and begin the encryption process, indicated by a dialog with a progress bar.
Once the encryption process is complete the startup key or PIN (depending on the configuration settings) will be required next time the system is started.
== Duplicating BitLocker Startup Keys and Recovery Passwords ==