1.    27 Jan 2017 #1
    Join Date : Jun 2016
    Posts : 115
    Windows 10 Pro

    Bitlocker Process - 2 bek (startup) keys and one recovery key


    I don't know if this what should happen but I was watching the process of key storage as I went through the BitLocker encryption process.

    To see what was happening on the usb drive to which I was saving the startup and recovery keys I had to enable 'show system files' in order to see the .bek key.* I have seen posts stating that these are 'hidden files'. Maybe they are both? I am assuming that if the restart to check that usb key works succeeds, then presumably the machine is 'booting' from the usb key (.bek file)...?

    1. Turned bitlocker on the C drive
    2. usb drive was preselected to save STARTUP KEY
    3. clicked on save
    4. ONE bek key created on USB drive
    5. Question re save location for recovery key > selected save to usb flash drive
    6. USB drive preselected > clicked on save
    7. Another bek key and recovery key saved with same timestamp
    8. clicked on next > encrypt entire drive > run check > restart

    So TWO .bek (startup) keys......Does anyone know why two?

    One for each partition although I did not yet have BitLocker turned on my data partition.
    Or maybe one for the Windows recovery partition?* Although I thought I had read that this remained unencrypted...?
      My ComputerSystem Spec
  2.    27 Jan 2017 #2
    Join Date : Jun 2016
    Posts : 115
    Windows 10 Pro
    Thread Starter

    answer to two bek keys


    Just worked out what it is. There is a bek key for StartUp and a bek key for Recovery. A bit confusing as there is also a 'BitLocker Recovery Key' (different format to bek Recovery key)....???

    Can anyone shed any further light?

    UPDATE:
    Must be that the system partition requires both startup and recovery .bek keys.

    The data partition appears to only have one .bek key, presumably a recovery key.

    The encryption of both system and data partitions has created just one BitLocker Recovery Key in a text file for each partition.
    Last edited by kevvyb; 28 Jan 2017 at 09:35.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
BitLocker Encryption process VERY Slow on Win10
I just installed Win10 Pro and I love it. When I enabled BitLocker, I selected to encrypt the Entire drive instead of the Used Space because I just feel I am safer with encrypting the entire drive. And my drive is not new. It had Win7 running...
AntiVirus, Firewalls and System Security
How to get around bitlocker recovery key
When I boot up my laptop I am asked to enter the bitlocker recovery key. I do not have this, I don't even recall setting it up. How do I solve this issue. I am willing to completely reinstall windows. I can't get in any further than this screen. Any...
AntiVirus, Firewalls and System Security
Windows 10 Mobile Bitlocker Recovery Key Blue Screen
A couple of weeks ago I posed a question HERE regarding how to tell whether Windows 10 Mobile device storage was actually encrypted and if so where were the recovery keys stored. The good news, is that the device storage is indeed encrypted when...
AntiVirus, Firewalls and System Security
Security System Backup BitLocker Recovery Key in Windows 10
How to Backup BitLocker Recovery Key for Drive in Windows 10 A BitLocker recovery key is a special key that you can create when you turn on Bitlocker Drive Encryption for the first time on each drive that you encrypt. You can use the recovery key...
Tutorials
BitLocker Encryption Process? Used or Entire Disk Space?
Hello everyone, Since choosing to encrypt the ENTIRE drive with BitLocker which can take very long time to complete, can I encrypt the Used Disk Space only when re-installing Windows 10? When there is a need for me to reinstall Windows, here is...
AntiVirus, Firewalls and System Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 05:28.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums