BitLocker je alat za šifriranje uključen u sustav Windows^(Windows) koji možete koristiti za osiguranje podataka na bilo kojem disku. Iako prema zadanim postavkama, BitLocker zahtijeva prisutnost TPM čipa na vašem računalu kako bi mogao šifrirati pogon sustava, i dalje ga možete koristiti bez njega. Međutim, za to morate izričito postaviti Windows da dopušta BitLocker bez TPM -a . U ovom članku ćemo vam objasniti što je TPM , zašto BitLocker zahtijeva TPM i kako zaobići ovaj zahtjev. Dakle, ako želite koristiti BitLocker bez TPM -a , čitajte dalje:

NAPOMENA:^(NOTE:) Ovaj vodič odnosi se na Windows 11 i Windows 10 . Međutim, imajte na umu da je BitLocker značajka prisutna samo u Pro i novijim izdanjima sustava Windows . Ako imate Home izdanje Windowsa^(Windows) , ne možete ga koristiti. Ako vam je potrebna pomoć pri identificiranju vašeg Windows izdanja, pročitajte ovaj vodič: Kako reći koji sustav Windows imam (11 načina)^{(How to tell what Windows I have (11 ways))} .

Zašto BitLocker zahtijeva TPM i što je TPM ?

Da biste razumjeli zašto BitLocker zahtijeva da TPM čip funkcionira kako je predviđeno, ali i kako možete zaobići ovaj zahtjev, prvo morate znati što je BitLocker^{(know what BitLocker is)} . Odgovor je relativno jednostavan: BitLocker je značajka šifriranja koja se nalazi u operacijskom sustavu Windows koja vam omogućuje šifriranje cijelih diskova^{(BitLocker is an encryption feature found in Windows operating system that allows you to encrypt entire drives)} (particija ili volumena ako želite). Prema zadanim postavkama, koristi algoritam šifriranja koji se zove AES^{(encryption algorithm called AES)} i zahtijeva prisutnost TPM čipa na matičnoj ploči vašeg računala.

Sljedeće pitanje na koje moramo odgovoriti je "Što je TPM?" ^{(“What’s TPM?”)}. TPM (ili Trusted Platform Module) je čip koji može generirati sigurne i jedinstvene kriptografske ključeve. ^{(TPM (or Trusted Platform Module) is a chip that can generate secure and unique cryptographic keys.)}Ovi ključevi su također šifrirani i pohranjeni su na samom čipu. Nadalje, ključeve šifre može dešifrirati samo čip koji ih je generirao.

Modul pouzdane platforme^{(Platform Module)} instaliran na matičnoj ploči

Pa zašto je BitLockeru^(BitLocker) potreban TPM ? Kada šifrirate pogon sustava u sustavu Windows^(Windows) pomoću BitLockera^(BitLocker) , on koristi TPM čip na vašem računalu za stvaranje i spremanje ključeva za šifriranje. Vaše računalo tada koristi te ključeve za provjeru autentičnosti i omogućava vam pristup šifriranim diskovima. Ako originalni TPM čip koji se koristi za generiranje ključeva nije pronađen na vašem računalu, šifrirani pogoni nisu dostupni. ^{(If the original TPM chip used to generate the keys is not found on your PC, the encrypted drives are not accessible.)}Jednostavnijim riječima, nakon što šifrirate pogon sustava s BitLockerom^(BitLocker) i TPM čipom, nitko ne može uzeti vaš šifrirani disk, staviti ga u drugo računalo i pristupiti podacima pohranjenim na njemu.

Većina računala i prijenosnih računala koji se danas prodaju imaju ugrađene TPM čipove, jer Windows 11 zahtijeva njihovu prisutnost^{(Windows 11 requires their presence)} . Čak i ako vaše Windows računalo ili prijenosno računalo nema TPM čip, možete ga kupiti zasebno u trgovinama elektronikom. No, ako matična ploča vašeg računala ne podržava TPM čip i ne možete ga montirati, još uvijek postoji krajnja opcija: koristite BitLocker bez TPM -a . Iako je manje siguran od korištenja BitLockera^(BitLocker) s TPM -om , nedvojbeno je jeftiniji i još uvijek bolji nego da nema šifriranja. Evo kako:

Što se događa ako pokušate koristiti BitLocker bez TPM -a (savjet: BitLocker TPM pogreška)

Ako pokušate omogućiti BitLocker^{(enable BitLocker)} na pogonu sustava s računala bez TPM čipa, dobit ćete pogrešku: "Ovaj uređaj ne može koristiti modul pouzdane platforme."^{(“This device can’t use a Trusted Platform Module.”)}

Ovaj uređaj ne može koristiti modul pouzdane platforme^{(Platform Module)}

No, također vas nakon toga upućuje u pravom smjeru: "Vaš administrator mora postaviti opciju 'Dopusti BitLocker bez kompatibilnog TPM-a' u pravilu 'Zahtijevaj dodatnu autentifikaciju pri pokretanju' za volumene OS-a." ^{(“Your administrator must set the ‘Allow BitLocker without a compatible TPM’ option in the ‘Require additional authentication at startup’ policy for OS volumes.”)}To je ono što ćemo vam pokazati kako to učiniti u sljedećem poglavlju ovog vodiča: upotrijebite uređivač pravila lokalne grupe^{(Local Group Policy Editor)} da uključite pravilo koje dopušta upotrebu BitLockera^(BitLocker) bez TPM -a .

Kako koristiti BitLocker bez TPM-a

You can use BitLocker to encrypt your system drive even without a TPM chip. However, for this to work, you need to edit a Windows policy using the Local Group Policy Editor tool. One of the fastest ways to open it is to search for gpedit and click or tap on the “Edit group policy” result.

Search for Local Group Policy Editor in Windows 11

In the Local Group Policy Editor, open the Computer Configuration folder on the left and navigate to “Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.”

Kretanje kroz uređivač lokalnih grupnih pravila^{(Local Group Policy Editor)}

Zatim na desnoj ploči potražite postavku pod nazivom "Zahtijeva dodatnu provjeru autentičnosti pri pokretanju". ^{(“Require additional authentication at startup.”)}Otvorite ga dvostrukim klikom ili dvostrukim dodirom na njegovo ime.

Otvorite Zahtijevaj^{(Open Require)} dodatnu provjeru autentičnosti pri pokretanju u uređivaču pravila lokalne grupe^{(Local Group Policy Editor)}

Ovo otvara novi prozor koji prikazuje svojstva pravila. U njemu postavite stanje pravila na Omogućeno^(Enabled) i uključite postavku pod nazivom "Dopusti BitLocker bez kompatibilnog TPM-a". ^{(“Allow BitLocker without a compatible TPM.”)}Zatim pritisnite OK da biste spremili promjene.

Postavite Dopusti BitLocker^{(Set Allow BitLocker)} bez kompatibilnog TPM-a

Zatvorite uređivač lokalnih grupnih pravila^{(Local Group Policy Editor,)} i možete početi koristiti BitLocker^{(start using BitLocker)} bez TPM -a za šifriranje pogona sustava. Od sada više nećete dobivati ​​BitLocker pogrešku koja kaže da "Ovaj uređaj ne može koristiti modul pouzdane platforme."^{(“This device can’t use a Trusted Platform Module.”)}

NAPOMENA:^{(NOTE: )} Kasnije, ako želite vratiti stvari kako su bile, slijedite iste korake i postavite "Zahtijevaj dodatnu provjeru autentičnosti pri pokretanju"^{(“Require additional authentication at startup”)} na Nije konfigurirano^{(Not Configured)} .

Jeste^(Did) li uspjeli dopustiti BitLocker bez kompatibilnog TPM-a?

Kao što možete vidjeti iz ovog vodiča, nije teško postaviti BitLocker i Windows kako bi vam omogućili šifriranje pogona sustava čak i bez TPM čipa. Ako slijedite korake koje smo opisali, ne biste trebali imati problema. Ostavite nam komentar ispod sa svojim iskustvom kako biste omogućili BitLocker bez kompatibilnog TPM -a .

How to allow BitLocker without a compatible TPM chip on Windows

BitLocker is an encryption tool included in Windows that you can use to sеcure your data on any drive. Althoυgh by default, BitLocker requires the presence оf a TPM chip in your сompυter to be able to encrypt the sуstem drive, you can still use it without оne. However, for that, you need tо explicitly set Windows to allow BitLocker without TPM. In this article, we’ll explain to you what TPM is, why BitLocker requires TPM, and also hоw to bypass this requirement. So, if you want tо use BitLocker without TPM, read on:

NOTE: This guide applies to Windows 11 and Windows 10. However, note that BitLocker is a feature present only in the Pro and higher editions of Windows. If you have a Home edition of Windows, you can’t use it. If you need help identifying your Windows edition, read this tutorial: How to tell what Windows I have (11 ways).

Why does BitLocker require TPM & What’s TPM?

To understand why BitLocker requires a TPM chip to function as intended, but also how you can bypass this requirement, you must first know what BitLocker is. The answer is relatively simple: BitLocker is an encryption feature found in Windows operating system that allows you to encrypt entire drives (partitions or volumes if you prefer). By default, it uses an encryption algorithm called AES and requires the presence of a TPM chip on your computer’s motherboard.

The next question we need to answer is “What’s TPM?”. TPM (or Trusted Platform Module) is a chip that can generate secure and unique cryptographic keys. These keys are encrypted too, and they’re stored on the chip itself. Furthermore, the cipher keys can be decrypted only by the chip that generated them in the first place.

Trusted Platform Module installed on a motherboard

So why does BitLocker need TPM? When you encrypt a system drive in Windows using BitLocker, it uses the TPM chip on your PC to create and save the encryption keys. Your PC then uses those keys to authenticate and allow you access to the encrypted drives. If the original TPM chip used to generate the keys is not found on your PC, the encrypted drives are not accessible. In simpler words, once you encrypt a system drive with BitLocker and a TPM chip, nobody can take your encrypted drive, put it in another computer, and access the data stored on it.

Most computers and laptops sold these days have built-in TPM chips, as Windows 11 requires their presence. Even if your Windows PC or laptop doesn’t have a TPM chip, you can buy one separately from electronics stores. But, if your computer’s motherboard doesn’t support a TPM chip and you can’t mount one, there’s still a last resort option: use BitLocker without TPM. Although it’s less secure than using BitLocker with TPM, it’s undoubtedly cheaper and still better than no encryption at all. Here’s how:

What happens if you try using BitLocker without TPM (hint: BitLocker TPM error)

If you try to enable BitLocker on a system drive from a PC without a TPM chip, you’ll get an error: “This device can’t use a Trusted Platform Module.”

This device can’t use a Trusted Platform Module

But, it also points you in the right direction afterward: “Your administrator must set the ‘Allow BitLocker without a compatible TPM’ option in the ‘Require additional authentication at startup’ policy for OS volumes.” That’s what we’re going to show you how to do in the next chapter of this tutorial: use the Local Group Policy Editor to turn on the policy that allows the use of BitLocker without TPM.

How to use BitLocker without TPM

You can use BitLocker to encrypt your system drive even without a TPM chip. However, for this to work, you need to edit a Windows policy using the Local Group Policy Editor tool. One of the fastest ways to open it is to search for gpedit and click or tap on the “Edit group policy” result.

Search for Local Group Policy Editor in Windows 11

In the Local Group Policy Editor, open the Computer Configuration folder on the left and navigate to “Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.”

Navigating through the Local Group Policy Editor

Next, in the right panel, search for the setting named “Require additional authentication at startup.” Open it with a double-click or double-tap on its name.

Open Require additional authentication at startup in Local Group Policy Editor

This opens a new window showing the properties of the policy. In it, set the policy’s state to Enabled and turn on the setting called “Allow BitLocker without a compatible TPM.” Then, press OK to save your changes.

Set Allow BitLocker without a compatible TPM

Close the Local Group Policy Editor, and you can start using BitLocker without TPM for encrypting your system drive. From now on, you’ll no longer get the BitLocker error saying that “This device can’t use a Trusted Platform Module.”

NOTE: Later on, if you want to set things back to the way they were, follow the same steps and set “Require additional authentication at startup” to Not Configured.

Did you manage to allow BitLocker without a compatible TPM?

As you can see from this tutorial, it’s not hard to set BitLocker and Windows to allow you to encrypt the system drive even without a TPM chip. If you follow the steps we described, you should have no trouble at all. Leave us a comment below with your experience to allow BitLocker without a compatible TPM.

Related posts

• Šifrirajte USB pogon pomoću BitLocker To Go u sustavu Windows 10

• Kako upravljati BitLockerom na USB memorijskom uređaju ili flash disku

• Kako ukloniti BitLocker To Go s USB pogona

• Kako otključati BitLocker USB pogon ili vanjski tvrdi disk

• 3 načina za pristup BitLockeru u sustavu Windows

• Što je vraćanje sustava i 4 načina kako ga koristiti

• 5 načina za deinstaliranje ažuriranja za Windows 11 -

• Kako deinstalirati upravljačke programe iz Windowsa, u 5 koraka

• Kako pokrenuti Windows 11 u sigurnom načinu rada (8 načina) -

• Kako mogu poništiti lozinku za svoj Microsoft račun? -

• Kako konfigurirati postavke proxy poslužitelja u sustavu Windows 10 -

• Dobijte pristup USB pogonu šifriranom BitLockerom kada zaboravite njegovu lozinku

• Kako blokirati udaljenu radnu površinu na vašem Windows računalu -

• Što su varijable okruženja u sustavu Windows? -

• Koja je najnovija verzija sustava Windows 10? Provjerite verziju koju imate!

• Kako koristiti Check Disk (chkdsk) za testiranje i ispravljanje pogrešaka tvrdog diska u sustavu Windows 10 -

• Pomoćnik za ažuriranje sustava Windows 10: Nadogradite na svibanj 2021. Ažurirajte danas!

• Kako pokrenuti Windows 10 u sigurnom načinu rada s umrežavanjem

• Kako koristiti USB pogon za oporavak sustava Windows 10 -

• Kako napraviti izvanmrežno skeniranje Windows Defendera