Taking Control of Unmanaged BitLocker Devices

You can do a takeover of BitLocker-encrypted devices that are not managed by Endpoint Security, and make them centrally managed. You can do this using BitLocker Management or Check Point Full Disk Encryption.

  1. To take control of unmanaged BitLocker devices using BitLocker Management.

    Define and install a Full Disk Encryption policy with BitLocker Management. Follow these guidelines:

    1. Define a Full Disk Encryption rule that applies to the entire organization or only to the entities that need BitLocker Management.
    2. In BitLocker Encryption Settings, select Windows Default as the Encryption Algorithm.

      This leaves the existing BitLocker encryption in place. Selecting another algorithm explicitly may result in a re-encryption if the existing algorithm does not match the algorithm in the policy. Re-encryption can take a long time depending on the disk size, disk speed, and PC hardware.

  2. To take control of unmanaged BitLocker devices using Check Point Full Disk Encryption.

    After the devices are under Check Point BitLocker Management, define a rule with Check Point Full Disk Encryption that applies to the Entire Organization or only to the entities that need Check Point Full Disk Encryption. See Check Point Disk Encryption for Windows.

Tip:

When you change the encryption policy for clients from BitLocker Management to Check Point Full Disk Encryption, the disk on the client is decrypted and then encrypted. This causes the disk to be in an unencrypted state for some time during the process. We recommend that you do not change the encryption policy for entire organization in one operation. Make the change for one group of users at a time.