Windows 10: Unable to unlock USB drives encrypted/locked with Bitlocker To Go

  1.    22 Jul 2016 #1

    Unable to unlock USB drives encrypted/locked with Bitlocker To Go


    Hey All,

    Recently my company provided me with a Windows 10 SOE image as part of a UAT. The image includes Symantec Endpoint Encryption which utilizes Bitlocker for encryption.

    I went through all of the motions with the C:\ drive to be encrypted and even printed the recovery key. Well, at some point I plugged in a few My Passport USB drives and they became locked by Bitlocker To Go. Everytime I try to unlock or click on these drives it asks for the 48-bit key which I don't have because I never was prompted to encrypt/lock these drives.

    Click image for larger version. 

Name:	2016_07_22_16_27_041.png 
Views:	25 
Size:	11.1 KB 
ID:	91535

    Click image for larger version. 

Name:	2016_07_22_16_27_422.png 
Views:	2 
Size:	44.6 KB 
ID:	91536

    IT says that there are no keys stored on the servers for these USB drives and suggested that this would be a "local" encryption. However, they also stated that they wouldn't be encrypted unless I was prompted about it. So, there's this mystery about how these USB drives came to be locked.


    I've been doing some research and the closest I've come is getting some output about the protectors:
    Code:
    c:\Windows\System32>manage-bde -protectors g: -get
    BitLocker Drive Encryption: Configuration Tool version 10.0.10011
    Copyright (C) 2013 Microsoft Corporation. All rights reserved.
    
    
    Volume G: [Label Unknown]
    All Key Protectors
    
    
        Numerical Password:
          ID: {27319850-4EB5-42AC-9BA5-1C0CCB997EE7}
    
    
        External Key:
          ID: {A4A49BE5-70A4-4388-8B2F-8C13B1CA765C}
          External Key File Name:
            A4A49BE5-70A4-4388-8B2F-8C13B1CA765C.BEK
    I've tried to copy the .bek file to another non-encrypted/locked USB but get:

    Code:
    c:\Windows\System32>manage-bde -protectors -add g: -rp f:\key
    BitLocker Drive Encryption: Configuration Tool version 10.0.10011
    Copyright (C) 2013 Microsoft Corporation. All rights reserved.
    
    
    ERROR Cannot specify multiple volumes
    
    c:\Windows\System32>manage-bde -protectors -add g: -rp f:\key\key.txt
    BitLocker Drive Encryption: Configuration Tool version 10.0.10011
    Copyright (C) 2013 Microsoft Corporation. All rights reserved.
    
    
    ERROR: The operation cannot be performed because the volume is locked.
    I've tried all of the passwords (even blank) I have in an attempt to unlock the drive:

    Code:
    c:\Windows\System32>manage-bde -unlock g: -pw
    BitLocker Drive Encryption: Configuration Tool version 10.0.10011
    Copyright (C) 2013 Microsoft Corporation. All rights reserved.
    
    
    Enter the password to unlock this volume:
    ERROR: The password failed to unlock volume G:.
    When I search my laptop by either the Numerical or External IDs, I get nothing even with hidden files enabled.

    Can anybody provide any recommendations here? I can always provide any additional info. Should I also post in the MS forums?

    There's so much data on these drives that I cannot loose.

    Regards, Jimmy
      My ComputerSystem Spec

  2.    23 Jul 2016 #2

    Hi there

    assuming the drives aren't encrypted then a Linux Distro should rescue you here.

    Boot up any Linux Live CD - Linux Mint is a good one. Plug your USB in - should be recognized as an NTFS / FAT32 drive. Use the built in file manager (If the KDE desktop then DOLPHIN is the file manager - works and looks fairly similar to Windows / File explorer). Copy what you need or delete other stuff you don't need.

    I don't think there's Windows fixes for this.

    To make a Linux bootable USB stick I recommend download this ISO (Linux mint Rosa 17.3 x-64 KDE)

    Linux Mint 17.3 "Rosa" - KDE (64-bit) - Linux Mint

    Then use (on windows) RUFUS to make bootable USB stick.

    Rufus - Create bootable USB drives the easy way

    Boot the USB stick, plug your other stuff in and use DOLPHIN to get your data. Linux reads and writes Windows file formats.

    Here's an example of DOLPHIN reading an HP 64GB USB stick that I couldn't access with windows -

    Click image for larger version. 

Name:	snapshot29.png 
Views:	19 
Size:	86.5 KB 
ID:	91700

    Cheers
    jimbo
      My ComputerSystem Spec

  3.    24 Jul 2016 #3

    Thanks, jimbo45.

    I already have another laptop running Ubuntu here, but the drive doesn't show up. However, I believe that's because the drive is Bitlocker locked. Unless using a Live CD versus an install makes any difference which I'm confident it won't.
      My ComputerSystem Spec

  4.    24 Jan 2017 #4

    Hi,

    coolguy9000, have you been able to resolve this issue?
    I am having almost same problem as you are. The only different is I restarted my computer while the encryption was still running.
    Click image for larger version. 

Name:	2017-01-20 12_06_40-Administrator_ Command Prompt.png 
Views:	7 
Size:	22.4 KB 
ID:	118390
    I do not have any data in the USB do recover.
    Every formatting software i try tells me that the drive is write protected.

    Is there how do I format the drive and put it to use again?

    Thank you,
      My ComputerSystem Spec


 

Related Threads
Hi all, I've enabled BitLocker (Win 10 Pro) on a Dell laptop Inspiron 5558 and all went well. BUT.... When I power on the computer the familiar light blue BitLocker screen appears but there is no prompt to enter the key. Just a light blue...
Bitlocker: Encrypted USB no access in AntiVirus, Firewalls and System Security
Hello, I have a usb that has been encrypted using bitlocker, I can connect this usb to my desktop and I can input the password and access the usb. However on my laptop and other computers, when I plug in the usb I do not get the prompt to input my...
How to Turn On or Off Auto-unlock for BitLocker Drive in Windows 10 BitLocker can encrypt the drive Windows is installed on (the operating system drive) as well as fixed data drives (such as internal hard drives). You can also use BitLocker To Go...
Solved Reading a BitLocker Encrypted USB in Windows 10 Home in AntiVirus, Firewalls and System Security
I recently under went the free upgrade from Windows 8.1 to Windows 10 and now find I can't read a BitLocker encrypted USB. Windows file explorer does not recognise the drive and there is no where I can enter the password. Can anybody help. Many...
Hello, need help on getting permission to D:\ drive, access denied. I installed windows 10 on a new SSD which is currently my drive C:\. There was a windows 7 which was on drive D:\ but I never uninstall it. Drive D:\ was working normally until...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 01:10.
Find Us