Instructions here are provided as a courtesy only for students to set up BitLocker in compliance with CUIMC requirements.
IMPORTANT: Computers used for work - including any personally owned - must have BitLocker set up by the department or division's Certified IT Group as per CUIMC Information Security Requirements.
Turning off BitLocker to decrypt a computer is needed if it originally encrypted using a level such as AES-128 that does not meet University requirements.
IMPORTANT: We strongly recommend running a full back up of the computer before decrypting to ensure you will not lose important data if a problem occurs.
- Make sure the computer is plugged in to a power source rather than running off of the battery. Decryption may take a long time to complete.
NOTE: While decrypting, any password-protected screensaver lock will be disabled. If the computer stores sensitive or confidential data it should be kept in a physically secure place where others cannot access it.
- Login to the computer using an account with Administrative rights.
- Enter the Control Panel: type Control Panel into the search box, or right-click on the Start button in the lower left and select Control Panel from the menu that appears.
- Select the BitLocker Drive Encryption link. You may need to select a System and Security link first.
- The window will show all drives on the computer, with any encrypted drive(s) indicated by a padlock. Select the Turn Off BitLocker link to the right of the drive you wish to decrypt.
- In Turn Off BitLocker prompt select the Decrypt Drive (or Turn off BitLocker) button.
- A Decrypting status window will appear showing its progress and completion.
If you have decrypted the drive to change the BitLocker encryption method to AES-256 please see our full instructions to prepare your computer, set BitLocker to AES-256, then enable BitLocker.