BitLocker waa qalab sir ah oo ku jira Windows oo aad isticmaali karto si aad u xafiddo xogtaada wadwad kasta. In kasta oo sida caadiga ah, BitLocker uu u baahan yahay joogitaanka chip TPM ee kombuyuutarkaaga si uu awood ugu yeesho in uu sireeyo nidaamka wadista, waxaad weli isticmaali kartaa mid la'aan. Si kastaba ha noqotee, taas, waxaad u baahan tahay inaad si cad u dejiso Windows si ay u oggolaato BitLocker la'aan TPM . Maqaalkan, waxaan kuugu sharxi doonaa waxa TPM yahay, sababta BitLocker ugu^(BitLocker) baahan tahay TPM , iyo sidoo kale sida looga gudbo shuruudahan. Markaa, haddii aad rabto inaad isticmaasho BitLocker TPM la'aan , sii akhri:

FIIRO GAAR AH:^(NOTE:) Hagahan waxa uu khuseeyaa Windows 11 iyo Windows 10 . Si kastaba ha noqotee, ogow in BitLocker uu yahay muuqaal ku jira Pro iyo daabacadaha sare ee Windows . Haddii aad leedahay daabacaadda guriga ee ^(Home)Windows , ma isticmaali kartid. Haddii aad u baahan tahay in lagaa caawiyo aqoonsiga daabacaada Windows , akhri casharkan: Sida loo sheego waxa Windows aan haysto (11 siyaabood)^{(How to tell what Windows I have (11 ways))} .

Muxuu BitLocker uga^(BitLocker) baahan yahay TPM & Waa maxay TPM ?

Si aad u fahamto sababta BitLocker ugu baahan tahay chip TPM inuu u shaqeeyo sidii loogu talagalay, laakiin sidoo kale sida aad uga gudbi karto shuruudahan, waa inaad marka hore ogaataa waxa BitLocker yahay^{(know what BitLocker is)} . Jawaabtu waa sahlan tahay: BitLocker waa sifada sirta ah ee laga helo nidaamka hawlgalka Windows kaas oo kuu ogolaanaya inaad sirayso dhammaan darawallada^{(BitLocker is an encryption feature found in Windows operating system that allows you to encrypt entire drives)} (qaybo ama mugga haddii aad doorbidayso). Sida caadiga ah, waxay isticmaashaa algorithm sir ah oo loo yaqaan AES^{(encryption algorithm called AES)} waxayna u baahan tahay joogitaanka chip TPM ee kumbuyuutarka kumbuyuutarkaaga.

Su'aasha xigta ee aan u baahanahay inaan ka jawaabno waa "Waa maxay TPM?" ^{(“What’s TPM?”)}. TPM (ama Module Platform la Aaminsan yahay) waa jajab dhalin kara furayaal ammaan ah oo gaar ah. ^{(TPM (or Trusted Platform Module) is a chip that can generate secure and unique cryptographic keys.)}Furayaashan sidoo kale waa la siray, waxayna ku kaydsan yihiin chip-ka laftiisa. Intaa waxaa dheer, furayaasha sibidhka waxaa lagu dejin karaa oo keliya chip-ka soo saaray meesha ugu horreeya.

Module Platform aamin ah^{(Platform Module)} oo lagu rakibay Motherboard-ka

Markaa maxay BitLocker ugu baahan tahay TPM ? Markaad sirayso nidaamka wadista Windows adoo isticmaalaya BitLocker , waxay isticmaashaa chip-ka TPM ee kombayutarkaga si ay u abuurto una kaydiso furayaasha sirta ah. Ka dib kombayutarkaagu wuxuu isticmaalaa furayaashaas si uu u xaqiijiyo oo uu kuu ogolaado inaad gasho darawalada sir ah. Haddii chip-kii asalka ahaa ee TPM ee loo adeegsaday in lagu soo saaro furayaasha aan laga helin PC-gaaga, darawallada sir ah lama heli karo. ^{(If the original TPM chip used to generate the keys is not found on your PC, the encrypted drives are not accessible.)}Erayada ka fudud, marka aad ku sirayso nidaamka wadista BitLocker iyo chip TPM , qofna ma qaadi karo darawalkaaga sir ah, ku ridi karo kombuyuutar kale, oo ma geli karo xogta ku kaydsan.

Inta badan kombuyuutarrada iyo laptop-yada la iibiyay maalmahan waxay leeyihiin chips TPM -ku-dhisan, sida ^(TPM)Windows 11 waxay u baahan tahay joogitaankooda^{(Windows 11 requires their presence)} . Xitaa haddii Windows PC-gaaga ama Laptop-kaagu aanu lahayn chip-ka TPM , waxaad ka iibsan kartaa mid gaar ah dukaamada elektiroonigga ah. Laakin, haddii Motherboard-ka kumbuyuutarkaagu uusan taageerin chip-ka TPM oo aadan ku rakibi karin mid, weli waxaa jira ikhtiyaarka ugu dambeeya: isticmaal BitLocker TPM la'aan . In kasta oo ay ka ammaan yar tahay isticmaalka BitLocker TPM ^(BitLocker),^(TPM) shaki la'aan way ka jaban tahay oo weli way ka fiican tahay sir la'aan. Waa kan sida:

Maxaa dhacaya haddii aad isku daydo inaad isticmaasho BitLocker TPM la'aanteed (tilmaan: qaladka BitLocker TPM )

Haddii aad isku daydo in aad BitLocker^{(enable BitLocker)} ka sahasho nidaamka kaxaynta kombuyuutar la'aanteed Chip TPM , waxaad heli doontaa khalad: "Qalabkani ma isticmaali karo Module Platform la aamini karo."^{(“This device can’t use a Trusted Platform Module.”)}

Qalabkani ma isticmaali karo Module Platform ah oo la aamini karo^{(Platform Module)}

Laakiin, waxay sidoo kale ku tilmaamaysaa jihada saxda ah ka dib: "Maamulkaagu waa inuu dejiyaa 'Oggolow BitLocker la'aanteed TPM la'aanteed' ee 'Waxay u baahan tahay caddayn dheeraad ah bilawga' siyaasadda mugga OS." ^{(“Your administrator must set the ‘Allow BitLocker without a compatible TPM’ option in the ‘Require additional authentication at startup’ policy for OS volumes.”)}Taasi waa waxa aan ku tusi doono sida loo sameeyo cutubka xiga ee casharkan: isticmaal tifaftiraha Siyaasadda Kooxda Maxaliga ah^{(Local Group Policy Editor)} si aad u shido siyaasadda u oggolaanaysa isticmaalka BitLocker TPM la'aan .

Sida loo isticmaalo BitLocker TPM la'aanteed

Waxaad isticmaali kartaa BitLocker si aad u sirayso wadida nidaamkaaga xitaa adigoon lahayn chip TPM . Si kastaba ha noqotee, si ay tani u shaqeyso, waxaad u baahan tahay inaad wax ka beddesho siyaasadda Windows adoo isticmaalaya ^(Windows)aaladda Tifaftiraha Siyaasadda Kooxda Deegaanka^{(Local Group Policy Editor tool)} . Mid ka mid ah siyaabaha ugu dhaqsaha badan ee loo furo^{(open it)} waa in la raadiyo gpedit oo guji ama taabo natiijada "wax ka beddelka siyaasadda kooxda"^{(“Edit group policy”)} .

Ka raadi ^(Search)Tifaftiraha Siyaasadda Kooxda Maxaliga^{(Local Group Policy Editor)} gudaha Windows 11^{(Windows 11)}

Gudaha Tifaftiraha Siyaasadda Kooxda Maxalliga ah^{(Local Group Policy Editor)} , fur galka Habaynta Kombiyuutarka^{(Computer Configuration)} ee dhanka bidix oo u “Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.”

Ku dhex maran Tifaftiraha Siyaasadda Kooxda Deegaanka^{(Local Group Policy Editor)}

Marka xigta, guddiga saxda ah, ka raadi goobta lagu magacaabo "Waxay u baahan tahay xaqiijin dheeraad ah markaad bilawdo." ^{(“Require additional authentication at startup.”)}Ku fur laba-guji ama laba-taabo magaciisa.

Furan waxay u baahan^{(Open Require)} tahay xaqiijin dheeraad ah marka la bilaabayo Tifaftiraha Siyaasadda Kooxda Maxaliga ah^{(Local Group Policy Editor)}

Tani waxay furaysaa daaqad cusub oo muujinaysa sifooyinka siyaasadda. Gudaha, deji xaalada siyaasadda si ay u shaqeyso^(Enabled) oo daar goobta loo yaqaan "Oggolow BitLocker la'aanteed TPM la jaan qaada." ^{(“Allow BitLocker without a compatible TPM.”)}Kadib, taabo OK si aad u badbaadiso isbedeladaada.

Deji Allow BitLocker^{(Set Allow BitLocker)} la'aanteed TPM ku habboon

Xir Tifaftiraha Siyaasadda Kooxda Maxalliga ah,^{(Local Group Policy Editor,)} oo waxaad bilaabi kartaa isticmaalka BitLocker^{(start using BitLocker)} la'aanteed TPM si aad u sirayso nidaamkaaga. Hadda wixii ka dambeeya, ma heli doontid qaladka BitLocker oo leh "Qalabkani ma isticmaali karo Module Platform la Aaminsan yahay."^{(“This device can’t use a Trusted Platform Module.”)}

FIIRO GAAR AH:^{(NOTE: )} Hadhow, haddii aad rabto inaad wax ku soo celiso sidii ay ahaan jireen, raac tillaabooyinka la mid ah oo deji “Codso aqoonsi dheeri ah marka bilawga la bilaabayo”^{(“Require additional authentication at startup”)} oo aan la habeyn^{(Not Configured)} .

Ma^(Did) maareysay inaad u ogolaato BitLocker la'aanteed TPM ku habboon?

Sida aad ka arki karto casharkan, ma adkeyd in la dejiyo BitLocker iyo Windows si ay kuu oggolaadaan inaad sir nidaamka wadista xitaa adigoon lahayn chip TPM . Haddii aad raacdo tillaabooyinka aan soo sheegnay, waa inaadan wax dhib ah la kulmin haba yaraatee. Hoos noogu dhaaf faallo khibradaada si aan ugu ogolano BitLocker^(BitLocker) iyada oo aan la helin TPM la jaan qaada .

How to allow BitLocker without a compatible TPM chip on Windows

BitLocker is an encryption tool included in Windows that you can use to sеcure your data on any drive. Although by default, BitLocker requires the presence of a TPM chip in your comрuter to be able to еncrypt thе system drive, yоu can still use it without one. However, for that, you need to explicitly set Windоws to allow BitLocker without TPM. In this article, wе’ll explain to you whаt TPM is, why BіtLoсker requires TPM, and also how to bypass this requirement. So, if you wаnt to use BitLocker without TPM, read оn:

NOTE: This guide applies to Windows 11 and Windows 10. However, note that BitLocker is a feature present only in the Pro and higher editions of Windows. If you have a Home edition of Windows, you can’t use it. If you need help identifying your Windows edition, read this tutorial: How to tell what Windows I have (11 ways).

Why does BitLocker require TPM & What’s TPM?

To understand why BitLocker requires a TPM chip to function as intended, but also how you can bypass this requirement, you must first know what BitLocker is. The answer is relatively simple: BitLocker is an encryption feature found in Windows operating system that allows you to encrypt entire drives (partitions or volumes if you prefer). By default, it uses an encryption algorithm called AES and requires the presence of a TPM chip on your computer’s motherboard.

The next question we need to answer is “What’s TPM?”. TPM (or Trusted Platform Module) is a chip that can generate secure and unique cryptographic keys. These keys are encrypted too, and they’re stored on the chip itself. Furthermore, the cipher keys can be decrypted only by the chip that generated them in the first place.

Trusted Platform Module installed on a motherboard

So why does BitLocker need TPM? When you encrypt a system drive in Windows using BitLocker, it uses the TPM chip on your PC to create and save the encryption keys. Your PC then uses those keys to authenticate and allow you access to the encrypted drives. If the original TPM chip used to generate the keys is not found on your PC, the encrypted drives are not accessible. In simpler words, once you encrypt a system drive with BitLocker and a TPM chip, nobody can take your encrypted drive, put it in another computer, and access the data stored on it.

Most computers and laptops sold these days have built-in TPM chips, as Windows 11 requires their presence. Even if your Windows PC or laptop doesn’t have a TPM chip, you can buy one separately from electronics stores. But, if your computer’s motherboard doesn’t support a TPM chip and you can’t mount one, there’s still a last resort option: use BitLocker without TPM. Although it’s less secure than using BitLocker with TPM, it’s undoubtedly cheaper and still better than no encryption at all. Here’s how:

What happens if you try using BitLocker without TPM (hint: BitLocker TPM error)

If you try to enable BitLocker on a system drive from a PC without a TPM chip, you’ll get an error: “This device can’t use a Trusted Platform Module.”

This device can’t use a Trusted Platform Module

But, it also points you in the right direction afterward: “Your administrator must set the ‘Allow BitLocker without a compatible TPM’ option in the ‘Require additional authentication at startup’ policy for OS volumes.” That’s what we’re going to show you how to do in the next chapter of this tutorial: use the Local Group Policy Editor to turn on the policy that allows the use of BitLocker without TPM.

How to use BitLocker without TPM

You can use BitLocker to encrypt your system drive even without a TPM chip. However, for this to work, you need to edit a Windows policy using the Local Group Policy Editor tool. One of the fastest ways to open it is to search for gpedit and click or tap on the “Edit group policy” result.

Search for Local Group Policy Editor in Windows 11

In the Local Group Policy Editor, open the Computer Configuration folder on the left and navigate to “Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.”

Navigating through the Local Group Policy Editor

Next, in the right panel, search for the setting named “Require additional authentication at startup.” Open it with a double-click or double-tap on its name.

Open Require additional authentication at startup in Local Group Policy Editor

This opens a new window showing the properties of the policy. In it, set the policy’s state to Enabled and turn on the setting called “Allow BitLocker without a compatible TPM.” Then, press OK to save your changes.

Set Allow BitLocker without a compatible TPM

Close the Local Group Policy Editor, and you can start using BitLocker without TPM for encrypting your system drive. From now on, you’ll no longer get the BitLocker error saying that “This device can’t use a Trusted Platform Module.”

NOTE: Later on, if you want to set things back to the way they were, follow the same steps and set “Require additional authentication at startup” to Not Configured.

Did you manage to allow BitLocker without a compatible TPM?

As you can see from this tutorial, it’s not hard to set BitLocker and Windows to allow you to encrypt the system drive even without a TPM chip. If you follow the steps we described, you should have no trouble at all. Leave us a comment below with your experience to allow BitLocker without a compatible TPM.

Related posts

• Ku xafid USB drive BitLocker si aad u gasho Windows 10

• Sida loo maareeyo BitLocker ku dul kaydinta xusuusta USB ama flash drive

• Sida looga saaro BitLocker To Go ka USB-ga

• Sida loo furo BitLocker USB-ga ama darawal adag oo dibadda ah

• 3 siyaabood oo lagu galo BitLocker gudaha Windows

• Kaaliyaha Cusboonaysiinta Windows 10: U cusboonaysii ilaa May 2021 Cusbooneysii maanta!

• Sida loo xannibo Desktop-ka fog ee PC-gaaga Windows-

• 8 aaladaha sirta ah ee lagu ilaaliyo faylalkaaga Windows

• Sida loo joojiyo macdanta crypto iyo cryptojacking Opera -

• Sida loo habeeyo Windows Sandbox (ku socodsiiso apps/scripts, share folders, iwm.)

• Sida loo hubiyo nooca BIOS ee Windows (8 siyaabo)

• Sida loogu daro oo loogu isticmaalo VPN gudaha Windows 10 (dhammaan waxaad u baahan tahay inaad ogaato)

• 17 siyaabood oo loo furo Control Panel gudaha Windows 11 iyo Windows 10

• Sida loo isticmaalo soo kabashada USB-ga Windows 10

• Sida loo bilaabo Windows 10 ee Habka Badbaado leh ee Shabakadda

• 5 siyaabood oo loo uninstall Windows 11 updates -

• Sida loo sameeyo iskaanka khadka tooska ah ee Difaaca Windows

• Sida loo rakibo Windows 10 ka DVD, ISO, ama USB -

• Sida telefoonkaaga looga saaro Windows 10

• Sida hoos loogu dhigo Windows 11 oo dib loogu laabo Windows 10