This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 76%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZ%3C/text%3E%3C/svg%3E)
Hello,
I posting to see how medium to large organizations that utilize bitlocker are able to not worry about updates or upgrades with bitlocker.
Is there a common management process that allows for this to function consistently?
Can updates / upgrades be automated with bitlocker enabled?
These are issue I can see becoming a larger problem with bitlocker being enabled.
Thanks!
If you get help from our reply, please click "Accept Answer" on a reply to help other community members find the helpful reply quickly.
If you resolve issue using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 77%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
By the way, the Microsoft documentation that you link is plain incorrect, @Teemo Tang
Of course you need to suspend BL for updates unless you run without preboot authentication active.
So only upgrades do suspend BL automatically, but not updates!
Of course you could suspend BitLocker during upgrade/update, that's a prudent method. However, Microsoft's document is not wrong, in my company, all computers are encrypted by BitLocker, both of OS partition and data partitions, we have upgraded computers to 21H1 integrally from different versions(1909, 20H1, 20H2), didn't suspend BitLocker, and upgrade process is successful.
Teemo, you didn_t understand what I wrote. Please try again :-) : "only upgrades do suspend BL automatically, but not updates"
So for the preboot authentication example would be for a PC with no TPM module that would require it.
Disabling bitlocker during the update?
You asked the same on Experts-Exchange.com and should have linked it here, so that no duplicate answers are given:
https://www.experts-exchange.com/questions/29218461/Can-bitlocker-create-issue-with-automation-and-updates.html
Hello,
No one can guarantee a completely normal upgrade on many computers, but BitLocker will not create problems during upgrades or updates in theory, you don’t need to worry about BitLocker enabled PCs have specifical BitLocker related trouble during upgrade.
Microsoft document explains this:
Can I upgrade to Windows 10 with BitLocker enabled?
Yes.
Do I have to suspend BitLocker protection to download and install system updates and upgrades?
No user action is required for BitLocker in order to apply updates from Microsoft, including Windows quality updates and feature updates.
https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-upgrading-faq#can-i-upgrade-to-windows-10-with-bitlocker-enabled-
-------------------------------------------------------------------------------------
If the Answer is helpful, please click "Accept Answer" and upvote it.
Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
