Identifing Bitlocker with Host Checker

[RedBull_]

Hello all,

Has anyone attempted to Identifing Bitlocker on and running within a Windows 7 machine while using Hostchecker?

Thanks

[mattspierce_]

Has anyone managed to come up with a host checker method for this?

Registry keys are not helpful as far as I can tell the bdesvc reg settings are the same for an encrypted and unencrypted system.

The process is svchost for the netsvc group that include BDESVC

The Service Status woudl work but I can't work out how to check a service status.

Command line tool to check status

manage-bde -status

wmi

http://www.windows-noob.com/forums/index.php?/topic/4095-how-can-i-determine-if-the-drive-is-encrypt...

This looks helpful but I dont' see how to run a wmi check.

[UFO!_]

Did anyone ever find a way to perform this check? I can't seem to find any way to do it.

[zanyterp_]

i don't have access to something to test this on; but does this change based on enabled status?

HKLM\Software\Microsoft\Windows\CurrentVersion\Bitlocker

[UFO!_]

The values stay the same enabled or disabled.

I did find: http://support.microsoft.com/kb/929820 which talks about the registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management\PagefileOnOsVolume with a value of 1 is created when you enable BitLocker. However, that key and value stays if you disable BitLocker.

So it helps, but still not the best check to use.

Thanks for looking zanyterp.

[PaddleFace_]

GEARS, A new solution from OPSWAT, detects BitLocker and virtually all other major hard disk encryption products in the market for PCs and Macs. GEARS easily integrates to Host Checker.  An admin configuration guide can be found at https://gears.opswat.com/integration/secure-access and attached.  Checks include:

- is installed

- is enabled

- volumes encrypted