Full disk encryption (FDE) is an important feature IT admins can use as an added layer of security for their fleet of systems. FDE encrypts a system\u2019s hard drive while at rest and protects its data in the case the system is lost or stolen. <\/p>\n\n\n\n
Compliance regulations often require FDE, too, so it might be a necessity in order to meet those obligations and pass audits. Whether you\u2019re an admin who wants to enforce FDE across your fleet for general security purposes or for regulatory compliance (or both), you\u2019ll want to ensure you\u2019ve done so systematically. There are various methods to check if FDE is on for your endpoints, depending on the operating system. <\/p>\n\n\n\n
For admins who are managing Windows\u00ae<\/sup> machines in Active Directory\u00ae<\/sup>, there are two key methods to query BitLocker information.<\/p>\n\n\n\n Admins can check the status of BitLocker on an individual Windows\u00ae<\/sup> system through Windows Explorer or the control panel on the machine. The admin has to be in front of the individual machine to do this, which won\u2019t work in most cases, particularly in large organizations or those with remote workers.<\/p>\n\n\n\n They can also use the PowerShell command Get-BitLockerVolume<\/em>. It returns information about BitLocker and its implementation, such as the percentage of the volume currently encrypted. Some cloud directory service platforms provide the ability to query this information, too.<\/p>\n\n\n\n Looking for more information about BitLocker management in the enterprise, including enabling it and storing recovery keys securely? Check out this video:<\/p>\n\n\n\n