{"id":25365,"date":"2024-03-28T04:56:35","date_gmt":"2024-03-28T03:56:35","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/bitlocker-configuration\/"},"modified":"2024-12-04T05:04:18","modified_gmt":"2024-12-04T04:04:18","slug":"bitlocker-configuration","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/cs\/knowledgebase\/configuration-windows-10-pc\/general\/security-management\/bitlocker\/bitlocker-configuration\/","title":{"rendered":"Konfigurace n\u00e1stroje BitLocker"},"content":{"rendered":"\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Obecn\u00e1 nastaven\u00ed<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Vy\u017eadovat \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed<\/p>\n <\/td>

\n

V z\u00e1vislosti na edici syst\u00e9mu Windows a konfiguraci syst\u00e9mu mohou b\u00fdt u\u017eivatel\u00e9 vyzv\u00e1ni k povolen\u00ed \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed:<\/p>\n

– Potvrzen\u00ed, \u017ee \u0161ifrov\u00e1n\u00ed od jin\u00e9ho poskytovatele nen\u00ed povoleno.<\/p>\n

– Vypnut\u00ed n\u00e1stroje BitLocker Drive Encryption a jeho op\u011btovn\u00e9 zapnut\u00ed.<\/p>\n <\/td>\n<\/tr>\n

\n

Metody \u0161ifrov\u00e1n\u00ed<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Metoda \u0161ifrov\u00e1n\u00ed jednotek opera\u010dn\u00edho syst\u00e9mu<\/p>\n <\/td>

<\/td>\n<\/tr>\n
<\/td>\n

Metoda \u0161ifrov\u00e1n\u00ed pevn\u00fdch datov\u00fdch jednotek<\/p>\n <\/td>

<\/td>\n<\/tr>\n
<\/td>\n

Metoda \u0161ifrov\u00e1n\u00ed vym\u011bniteln\u00fdch datov\u00fdch jednotek<\/p>\n <\/td>

<\/td>\n<\/tr>\n
\n

Zak\u00e1zat upozorn\u011bn\u00ed na \u0161ifrov\u00e1n\u00ed disku t\u0159et\u00ed stranou<\/p>\n <\/td>

\n

Zak\u00e1zat upozorn\u011bn\u00ed na slu\u017ebu \u0161ifrov\u00e1n\u00ed disku t\u0159et\u00ed strany, kter\u00e1 je v za\u0159\u00edzen\u00ed pou\u017e\u00edv\u00e1na.<\/p>\n

Od verze 1803 syst\u00e9mu Windows 10 je toto nastaven\u00ed podporov\u00e1no pouze pro za\u0159\u00edzen\u00ed p\u0159ipojen\u00e1 k Azure Active Directory.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Povolit spu\u0161t\u011bn\u00ed \u0161ifrov\u00e1n\u00ed, kdy\u017e je p\u0159ihl\u00e1\u0161en u\u017eivatel, kter\u00fd nen\u00ed spr\u00e1vcem<\/p>\n <\/td>

\n

Podporov\u00e1no pouze pro za\u0159\u00edzen\u00ed p\u0159ipojen\u00e1 k Azure Active Directory<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Roz\u0161\u00ed\u0159en\u00ed AppTec360<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Tich\u00e9 \u0161ifrov\u00e1n\u00ed<\/p>\n <\/td>

\n

Pokud je vybr\u00e1na mo\u017enost „Vy\u017eadovat \u0161ifrov\u00e1n\u00ed za\u0159\u00edzen\u00ed“, spust\u00ed slu\u017eba AppTec360 Management Service automatick\u00e9 tich\u00e9 \u0161ifrov\u00e1n\u00ed disk\u016f za\u0159\u00edzen\u00ed.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Automatick\u00e9 generov\u00e1n\u00ed pov\u011b\u0159en\u00ed u\u017eivatele<\/p>\n <\/td>

\n

Za\u0161ifrovan\u00e1 jednotka opera\u010dn\u00edho syst\u00e9mu bude chr\u00e1n\u011bna automaticky vygenerovan\u00fdmi p\u0159ihla\u0161ovac\u00edmi \u00fadaji u\u017eivatele.<\/p>\n

Bu\u010f k\u00f3d PIN \u010dipu TPM, pokud je \u010dip TPM k dispozici, nebo \u0161estim\u00edstn\u00e9 textov\u00e9 heslo.<\/p>\n

Vygenerovan\u00e9 pov\u011b\u0159en\u00ed se ode\u0161le na e-mailovou adresu registrovanou pro dan\u00e9 za\u0159\u00edzen\u00ed.<\/p>\n

Pokud je tato mo\u017enost vypnut\u00e1, jedinou mo\u017enou ochranou pro tich\u00e9 \u0161ifrov\u00e1n\u00ed je pou\u017eit\u00ed \u010dipu TPM.<\/p>\n

V takov\u00e9m p\u0159\u00edpad\u011b u za\u0159\u00edzen\u00ed bez \u010dipu TPM tich\u00e9 \u0161ifrov\u00e1n\u00ed sel\u017ee.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

\u0160ifrov\u00e1n\u00ed pevn\u00fdch disk\u016f<\/p>\n <\/td>

\n

V\u0161echny dostupn\u00e9 pevn\u00e9 datov\u00e9 jednotky budou rovn\u011b\u017e za\u0161ifrov\u00e1ny a chr\u00e1n\u011bny funkc\u00ed „Automatick\u00e9 odemyk\u00e1n\u00ed“ pomoc\u00ed kl\u00ed\u010de ulo\u017een\u00e9ho na jednotce opera\u010dn\u00edho syst\u00e9mu.<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t
Upravit<\/a><\/caption>\n
\n

Nastaven\u00ed jednotky OS<\/strong><\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Vy\u017eadov\u00e1n\u00ed dal\u0161\u00edho ov\u011b\u0159en\u00ed p\u0159i spu\u0161t\u011bn\u00ed<\/p>\n <\/td>

\n

Toto nastaven\u00ed umo\u017e\u0148uje nakonfigurovat, zda bude n\u00e1stroj BitLocker vy\u017eadovat ov\u011b\u0159en\u00ed p\u0159i ka\u017ed\u00e9m spu\u0161t\u011bn\u00ed po\u010d\u00edta\u010de.<\/p>\n

Toto nastaven\u00ed se pou\u017eije p\u0159i nastaven\u00ed n\u00e1stroje BitLocker.<\/p>\n

Pokud toto nastaven\u00ed povol\u00edte, mohou u\u017eivatel\u00e9 v pr\u016fvodci nastaven\u00edm n\u00e1stroje BitLocker konfigurovat pokro\u010dil\u00e9 mo\u017enosti spou\u0161t\u011bn\u00ed.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Blokov\u00e1n\u00ed n\u00e1stroje BitLocker bez kompatibiln\u00edho \u010dipu TPM<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Pouze TPM<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM a PIN<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM a kl\u00ed\u010d<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM, kl\u00ed\u010d a PIN<\/p>\n <\/td>

\n

Pokud chcete vy\u017eadovat pou\u017eit\u00ed k\u00f3du PIN a jednotky USB flash (kl\u00ed\u010de), mus\u00ed u\u017eivatel nastavit n\u00e1stroj BitLocker pomoc\u00ed n\u00e1stroje p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku „manage-bde“ nam\u00edsto pr\u016fvodce nastaven\u00edm n\u00e1stroje BitLocker Drive Encryption.<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Po\u017eadavek na minim\u00e1ln\u00ed d\u00e9lku k\u00f3du PIN<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Minim\u00e1ln\u00ed po\u010det znak\u016f<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Konfigurace zpr\u00e1vy a adresy URL pro obnoven\u00ed p\u0159ed spu\u0161t\u011bn\u00edm syst\u00e9mu<\/p>\n <\/td>

\n

Nakonfigurujte celou zpr\u00e1vu pro obnoven\u00ed nebo nahra\u010fte st\u00e1vaj\u00edc\u00ed adresu URL, kter\u00e1 se zobrazuje na obrazovce pro obnoven\u00ed p\u0159ed spu\u0161t\u011bn\u00edm syst\u00e9mu, kdy\u017e je jednotka OS uzam\u010dena.<\/p>\n

Pozn\u00e1mka: Ne v\u0161echny znaky a jazyky jsou podporov\u00e1ny v re\u017eimu p\u0159ed spu\u0161t\u011bn\u00edm syst\u00e9mu. D\u016frazn\u011b doporu\u010dujeme vyzkou\u0161et, zda se znaky, kter\u00e9 pou\u017e\u00edv\u00e1te, zobrazuj\u00ed na obrazovce obnoven\u00ed p\u0159ed spu\u0161t\u011bn\u00edm spr\u00e1vn\u011b. <\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Mo\u017enost zpr\u00e1vy p\u0159ed spu\u0161t\u011bn\u00edm syst\u00e9mu obnoven\u00ed<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Vlastn\u00ed zpr\u00e1va o obnoven\u00ed<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Vlastn\u00ed adresa URL pro obnoven\u00ed<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Mo\u017enosti obnovy jednotky OS<\/p>\n <\/td>

\n

Toto nastaven\u00ed umo\u017e\u0148uje \u0159\u00eddit zp\u016fsob obnoven\u00ed jednotek opera\u010dn\u00edho syst\u00e9mu chr\u00e1n\u011bn\u00fdch n\u00e1strojem BitLocker v p\u0159\u00edpad\u011b, \u017ee nejsou k dispozici po\u017eadovan\u00e9 pov\u011b\u0159en\u00ed.<\/p>\n

Toto nastaven\u00ed se pou\u017eije p\u0159i nastaven\u00ed n\u00e1stroje BitLocker.<\/p>\n

Ve v\u00fdchoz\u00edm nastaven\u00ed je povolen agent pro obnoven\u00ed dat zalo\u017een\u00fd na certifik\u00e1tu, mo\u017enosti obnoven\u00ed m\u016f\u017ee ur\u010dit u\u017eivatel, v\u010detn\u011b hesla pro obnoven\u00ed a kl\u00ed\u010de pro obnoven\u00ed, a informace o obnoven\u00ed nejsou z\u00e1lohov\u00e1ny do slu\u017eby AD DS.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Agent pro obnovu dat zalo\u017een\u00fd na blokov\u00e9m certifik\u00e1tu<\/p>\n <\/td>

\n

Ur\u010dete, zda lze agent pro obnovu dat pou\u017e\u00edt s jednotkami opera\u010dn\u00edho syst\u00e9mu chr\u00e1n\u011bn\u00fdmi n\u00e1strojem BitLocker.<\/p>\n

P\u0159ed pou\u017eit\u00edm agenta pro obnoven\u00ed dat je t\u0159eba jej p\u0159idat z polo\u017eky Z\u00e1sady ve\u0159ejn\u00fdch kl\u00ed\u010d\u016f v Konzole pro spr\u00e1vu z\u00e1sad skupiny nebo v Editoru m\u00edstn\u00edch z\u00e1sad skupiny.<\/p>\n

Dal\u0161\u00ed informace o p\u0159id\u00e1v\u00e1n\u00ed agent\u016f pro obnoven\u00ed dat naleznete v p\u0159\u00edru\u010dce BitLocker Drive Encryption Deployment Guide na webu Microsoft TechNet.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Nastaven\u00ed hesla pro obnoven\u00ed n\u00e1stroje BitLocker<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Nastaven\u00ed kl\u00ed\u010de pro obnoven\u00ed n\u00e1stroje BitLocker<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Ulo\u017een\u00ed informac\u00ed o obnoven\u00ed n\u00e1stroje BitLocker do slu\u017eby Active Directory Domain Services<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Konfigurace \u00falo\u017ei\u0161t\u011b pro obnoven\u00ed n\u00e1stroje AD DS BitLocker<\/p>\n <\/td>

\n

Ulo\u017een\u00ed bal\u00ed\u010dku kl\u00ed\u010d\u016f podporuje obnovu dat z jednotky, kter\u00e1 byla fyzicky po\u0161kozena.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Po\u017eadavek na ukl\u00e1d\u00e1n\u00ed dat pro obnoven\u00ed do slu\u017eby AD DS<\/p>\n <\/td>

\n

Zabr\u00e1nit u\u017eivatel\u016fm zapnout n\u00e1stroj BitLocker, pokud po\u010d\u00edta\u010d nen\u00ed p\u0159ipojen k dom\u00e9n\u011b a<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Pevn\u00e9 nastaven\u00ed pohonu<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Mo\u017enosti obnovy pevn\u00fdch disk\u016f<\/p>\n <\/td>

\n

Toto nastaven\u00ed umo\u017e\u0148uje \u0159\u00eddit zp\u016fsob obnoven\u00ed pevn\u00fdch disk\u016f chr\u00e1n\u011bn\u00fdch n\u00e1strojem BitLocker v p\u0159\u00edpad\u011b, \u017ee nejsou k dispozici po\u017eadovan\u00e9 pov\u011b\u0159en\u00ed.<\/p>\n

Toto nastaven\u00ed se pou\u017eije p\u0159i nastaven\u00ed n\u00e1stroje BitLocker.<\/p>\n

Ve v\u00fdchoz\u00edm nastaven\u00ed je povolen agent pro obnoven\u00ed dat zalo\u017een\u00fd na certifik\u00e1tu, mo\u017enosti obnoven\u00ed m\u016f\u017ee ur\u010dit u\u017eivatel, v\u010detn\u011b hesla pro obnoven\u00ed a kl\u00ed\u010de pro obnoven\u00ed, a informace o obnoven\u00ed nejsou z\u00e1lohov\u00e1ny do slu\u017eby AD DS.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Agent pro obnovu dat zalo\u017een\u00fd na blokov\u00e9m certifik\u00e1tu<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Nastaven\u00ed hesla pro obnoven\u00ed n\u00e1stroje BitLocker<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Nastaven\u00ed kl\u00ed\u010de pro obnoven\u00ed n\u00e1stroje BitLocker<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Ulo\u017een\u00ed informac\u00ed o obnoven\u00ed n\u00e1stroje BitLocker do slu\u017eby Active Directory Domain Services<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Konfigurace \u00falo\u017ei\u0161t\u011b pro obnoven\u00ed n\u00e1stroje AD DS BitLocker<\/p>\n <\/td>

\n

Ulo\u017een\u00ed bal\u00ed\u010dku kl\u00ed\u010d\u016f podporuje obnovu dat z jednotky, kter\u00e1 byla fyzicky po\u0161kozena.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Po\u017eadavek na ukl\u00e1d\u00e1n\u00ed dat pro obnoven\u00ed do slu\u017eby AD DS<\/p>\n <\/td>

\n

Zabr\u00e1nit u\u017eivatel\u016fm v povolen\u00ed n\u00e1stroje BitLocker, pokud po\u010d\u00edta\u010d nen\u00ed p\u0159ipojen k dom\u00e9n\u011b a pokud se nepoda\u0159\u00ed z\u00e1lohovat informace o obnoven\u00ed n\u00e1stroje BitLocker do slu\u017eby AD DS.<\/p>\n

Pozn\u00e1mka: Heslo pro obnoven\u00ed se generuje automaticky.<\/p>\n <\/td>\n<\/tr>\n

\n

Odep\u0159en\u00ed p\u0159\u00edstupu k z\u00e1pisu na nechr\u00e1n\u011bn\u00e9 pevn\u00e9 jednotky<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t
Upravit<\/a><\/caption>\n
\n

Nastaven\u00ed vym\u011bniteln\u00e9 jednotky<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Odep\u0159en\u00ed p\u0159\u00edstupu k z\u00e1pisu na nechr\u00e1n\u011bn\u00e9 vym\u011bniteln\u00e9 jednotky<\/p>\n <\/td>

\n

Odep\u0159en\u00ed p\u0159\u00edstupu k vym\u011bniteln\u00fdm datov\u00fdm jednotk\u00e1m, kter\u00e9 nejsou chr\u00e1n\u011bny n\u00e1strojem Bitlocker. Pozn\u00e1mka: Pokud „Vym\u011bniteln\u00e9 disky: Odep\u0159\u00edt p\u0159\u00edstup k z\u00e1pisu“ je v z\u00e1sad\u00e1ch skupiny povoleno, bude toto nastaven\u00ed z\u00e1sad ignorov\u00e1no. <\/p>\n <\/td>\n<\/tr>\n

\n

Odep\u0159en\u00ed p\u0159\u00edstupu k z\u00e1pisu do za\u0159\u00edzen\u00ed nakonfigurovan\u00fdch v jin\u00e9 organizaci<\/p>\n <\/td>

\n

P\u0159\u00edstup k z\u00e1pisu bude umo\u017en\u011bn pouze jednotk\u00e1m s identifika\u010dn\u00edmi poli shodn\u00fdmi s identifika\u010dn\u00edmi poli po\u010d\u00edta\u010de. Tato pole jsou definov\u00e1na nastaven\u00edm z\u00e1sad skupiny „Poskytnout jedine\u010dn\u00e9 identifik\u00e1tory pro va\u0161i organizaci“. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n","protected":false},"parent":25366,"menu_order":0,"template":"","class_list":["post-25365","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase\/25365","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":2,"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase\/25365\/revisions"}],"predecessor-version":[{"id":26737,"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase\/25365\/revisions\/26737"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/knowledgebase\/25366"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/cs\/wp-json\/wp\/v2\/media?parent=25365"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}