Bitlocker using win 32 api

Question

I have created a function inside my agent to apply bitlocker on a drive using win api, even though the execution is completed successfully the drives are not getting locked using bitlocker

Answer 1

Issue;

The function using Windows API to apply BitLocker executes successfully, but the drive remains unencrypted.

 

Resolution Steps;

1. Add a key protector; Ensure at least one key protector (e.g., TPM, password, recovery key) is added before invoking encryption methods. Without this, encryption will not proceed.
2. Validate Drive Format; Confirm the target drive is formatted as NTFS and is not a network drive, as BitLocker supports only NTFS volumes.
3. Check Encryption Status;  Use  GetConversionStatus and GetProtectionStatus methods from the Win32_EncryptableVolume WMI class to verify if encryption has started or completed.
4. TPM Initialization; If using TPM-based protection, verify that the TPM is initialized and ready using the Win32_Tpm WMI class.
5. Review Logs and Return Codes; Even if the function returns success, check system logs for any warnings or unmet prerequisites that may have prevented encryption