none
Bitlocker: Choose how to unlock your drive at startup RRS feed

  • Question

  • Is it possible to Enable unlocking the drive at startup with both PIN and USB?

    Looks like if I want to use PIN then i cannot unlock my computer drive with USB and If I wanna use USB to unlock i cant make my laptop require PIN at the start up 

    I just want to know if its possible to unlock it both ways at the same time and if the answer is yes ! please tell me how 

    thanks

    Ali 

    Friday, June 21, 2019 10:53 PM

All replies

  • You can choose to unlock the drive at startup with a password, USB flash drive, PIN (with TPM). 

    Check it here


    S.Sengupta,Microsoft MVP Windows and Devices for IT, Windows Insider MVP

    Saturday, June 22, 2019 1:09 AM
  • As soon as you enable the following GPO, you may use the combination of TPM+PIN+USB key, which means ALL are required if you set the protectors up that way OR either TPM+PIN OR USB startup key is required. Do you follow?

    So it's your choice how to set it up: require all 3 or require one of PIN or USB.

    To configure all 3, you will enable the GPO and then use the command line:

    manage-bde -on c: -rp -tpsk

    (tpsk means TPM and PIN and USB startup key)

    To configure either TPM+PIN or USB, use

    manage-bde -on c: -rp -tp -sk x:\

    (x: being your connected USB drive)

    • Proposed as answer by Ronald Schilf Saturday, June 22, 2019 8:14 AM
    Saturday, June 22, 2019 8:13 AM
  • Hi,

    Yes, we can use the group policy Require additional authentication at startup as Ronald Schilf recommended, set as a combination of the PIN and the USB flash drive.

    More information, refer to:

    https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings#require-additional-authentication-at-startup

    Best regards,

    Yilia 


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, June 24, 2019 2:55 AM
    Moderator
  • Hi,

    Is there anything I can do for you?

    If you have any problems or concerns, please feel free to post here. 

    Best regards,

    Yilia


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, June 27, 2019 8:08 AM
    Moderator
  • I did this but when I enable bitlocker I can pick to unlock the computer with PIN or USB not both 

    I want to be able to unlock it both ways 

    and it didnt seem to work 

    it just give me either USB or PIN not both

    Thursday, July 11, 2019 8:46 PM
  • Gunner, if you follow my instructions, it works, I used it that way.
    Friday, July 12, 2019 9:28 AM