Share via

Bit Locker Encryption

Anonymous
2025-02-03T14:04:29+00:00

Description: We are implementing data security in our organization using Windows BitLocker. We have successfully encrypted the C: drive and obtained a 48-digit recovery key, which we manage through Active Directory (AD).

Problem Summary: When enabling BitLocker on the D: drive, it generates a separate 48-digit recovery key, different from the C: drive. This creates additional overhead for managing multiple recovery keys in AD.

Error Message (if any): No error message, but concern about multiple recovery keys.

System Information:

  • OS: Windows 10/11 / Windows Server 2016/2019/2022
  • BitLocker Management: Managed via Active Directory (GPO)
  • Drives: Multiple (C:, D:, E:)

What We Have Tried:

  • Checked BitLocker Group Policy settings.
  • Looked for options to use a single recovery key for multiple drives but couldn’t find a clear solution.
  • Considered using TPM + PIN but still results in separate keys.

Question: Is it possible to generate a single 48-digit BitLocker recovery key that works across multiple drives (C:, D:, E:) in Windows? If yes, what would be the recommended way to configure this in an enterprise environment while integrating with AD?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Neil D 33,130 Reputation points Volunteer Moderator
2025-02-04T09:24:51+00:00

No that is not possible.

Was this answer helpful?

1 person found this answer helpful.
0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2025-02-04T04:20:37+00:00

    @neilpzz thanks for reply but my Question is

    Is it possible to generate a single 48-digit BitLocker recovery key that works across multiple drives (C:, D:, E:) in Windows? If yes, what would be the recommended way to configure this in an enterprise environment while integrating with AD?

    if this would be not possible can I have alternate option?

    Was this answer helpful?

    0 comments
  2. Neil D 33,130 Reputation points Volunteer Moderator
    2025-02-03T19:40:51+00:00

    The recovery key is related to the drive so the C: drive will have its own key and any additional drives will have their own key.

    If there were 3 drives in one system they would all have their own recovery key.

    Was this answer helpful?

    0 comments