Decrypting BitLocker on a Student Computer


Instructions here are provided as a courtesy only for students to set up BitLocker in compliance with CUIMC requirements.
IMPORTANT: Computers used for work  - including any personally owned - must have BitLocker set up by the department or division's Certified IT Group as per CUIMC Information Security Requirements.

Turning off BitLocker to decrypt a computer is needed if it originally encrypted using a level such as AES-128 that does not meet University requirements.
IMPORTANT: We strongly recommend running a full back up of the computer before decrypting to ensure you will not lose important data if a problem occurs.

  1. Make sure the computer is plugged in to a power source rather than running off of the battery. Decryption may take a long time to complete.
    NOTE: While decrypting, any password-protected screensaver lock will be disabled. If the computer stores sensitive or confidential data it should be kept in a physically secure place where others cannot access it.
  2. Login to the computer using an account with Administrative rights.
  3. Enter the Control Panel: type Control Panel into the search box, or right-click on the Start button in the lower left and select Control Panel from the menu that appears.
  4. Select the BitLocker Drive Encryption link. You may need to select a System and Security link first.
    BitLocker link in the Control Panel
  5. The window will show all drives on the computer, with any encrypted drive(s) indicated by a padlock. Select the Turn Off BitLocker link to the right of the drive you wish to decrypt.
    BitLocker menu
  6. In Turn Off BitLocker prompt select the Decrypt Drive (or Turn off BitLocker) button.
    Turn Off BitLocker prompt
  7. A Decrypting status window will appear showing its progress and completion.
    BitLocker decryption complete message

If you have decrypted the drive to change the BitLocker encryption method to AES-256 please see our full instructions to prepare your computer, set BitLocker to AES-256, then enable BitLocker.