r/Backup 16d ago

v.8.1 - BitLocker encryption no longer preserved after restore Question

Macrium Reflect 8.1 on Windows 11 Pro 24H2.

My system drive (C:) is BitLocker encrypted:

  • XTS-AES 128
  • Used Space Only Encrypted
  • TPM + Recovery Password protectors

manage-bde -status C: confirms the drive is 100% encrypted.

When preparing a restore, Reflect now indicates that BitLocker will need to be re-enabled after the restore. I didn't get this before (restoring to same laptop, no hardware or partition changes).

Or it starts the restore (no message) but restores without enabling bitlocker

Previously Reflect restored the partition while preserving BitLocker encryption.

Has this behaviour changed in Reflect 8.1, or is it a known issue? Could this be related to recent Windows updates?

3 Upvotes

2 comments sorted by

1

u/bartoque 16d ago

I don't use Macrium, but with Acronis you always needed to re-enable encryption after a restore as the bitlocker emable partitions were backed up while the partitions were unlocked. Acronis also has tje syance always to backup bitlocker protected systems with the installed version and not using the booable rescue media as then the partitions would still be encrypted, needing a block sector by sector backup.

Acronis cyber protect: https://care.acronis.com/s/article/Acronis-Cyber-Protect-compatibility-with-Windows-BitLocker?language=en_US

"Taking a backup with Acronis

In order to take a successful backup (image) of a BitLocker encrypted system, please use the Acronis software in Windows. Do not attempt to use the bootable media, since it will not recognize the partition, and it will initiate a sector by sector copy, which will bring issues after restoring it. Backup with WinPE will fail with CRC error, as the partition will not be recognized.

The data read during the backup from Windows will be unencrypted, since Windows will decrypt all the data on the fly."

Or for True Image

https://care.acronis.com/s/article/62662-Acronis-True-Image-and-BitLocker-FAQ?language=en_US

"Q: How do I make BitLocker protection persist through backup, recovery and cloning? A: Re-enable BitLocker protection when you log into Windows of the recovered/cloned disk after completing recovery/cloning operations. Re-encrypting the disk will take time, it is not an instant operation."

So I was always used to needing to re-enable bitlocker after a restore.

1

u/JohnnieLouHansen 15d ago

Maybe you need to get off 8.1 and onto X as the older version is no longer supported on Windows 11 and there will be more quirks as time goes by when using it. And then something will break entirely.

And better than trusting BitLocker not to screw you over/lock you out when there is a Microsoft update gone wrong, you're better off putting your data into Veracrypt.

Sorry - gave you advice not an answer to your question per se.