{"id":38973,"date":"2024-03-28T04:56:35","date_gmt":"2024-03-28T03:56:35","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/bitlocker-configuration\/"},"modified":"2024-12-04T05:04:19","modified_gmt":"2024-12-04T04:04:19","slug":"bitlocker-configuration","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/lv\/knowledgebase\/configuration-windows-10-pc\/general\/security-management\/bitlocker\/bitlocker-configuration\/","title":{"rendered":"BitLocker konfigur\u0101cija"},"content":{"rendered":"\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Redi\u0123\u0113t<\/a><\/caption>\n
\n

Visp\u0101r\u012bgie iestat\u012bjumi<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Piepras\u012bt ier\u012bces \u0161ifr\u0113\u0161anu<\/p>\n <\/td>

\n

Atkar\u012bb\u0101 no Windows versijas un sist\u0113mas konfigur\u0101cijas lietot\u0101jiem var tikt pied\u0101v\u0101ts iesp\u0113jot ier\u012bces \u0161ifr\u0113\u0161anu.Atkar\u012bb\u0101 no Windows versijas un sist\u0113mas konfigur\u0101cijas lietot\u0101jiem var tikt pied\u0101v\u0101ts:<\/p>\n

– Lai p\u0101rliecin\u0101tos, ka cita pakalpojumu sniedz\u0113ja \u0161ifr\u0113\u0161ana nav iesp\u0113jota.<\/p>\n

– BitLocker diska \u0161ifr\u0113\u0161anas izsl\u0113g\u0161ana un p\u0113c tam BitLocker atk\u0101rtota iesl\u0113g\u0161ana.<\/p>\n <\/td>\n<\/tr>\n

\n

\u0160ifr\u0113\u0161anas metodes<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Oper\u0113t\u0101jsist\u0113mas disku \u0161ifr\u0113\u0161anas metode<\/p>\n <\/td>

<\/td>\n<\/tr>\n
<\/td>\n

Fiks\u0113to datu diskdzi\u0146u \u0161ifr\u0113\u0161anas metode<\/p>\n <\/td>

<\/td>\n<\/tr>\n
<\/td>\n

\u0160ifr\u0113\u0161anas metode no\u0146emamiem datu diskiem<\/p>\n <\/td>

<\/td>\n<\/tr>\n
\n

Br\u012bdin\u0101juma par tre\u0161\u0101s puses diska \u0161ifr\u0113\u0161anu atsp\u0113jo\u0161ana<\/p>\n <\/td>

\n

Izsl\u0113gt br\u012bdin\u0101juma uzvedni par ier\u012bc\u0113 izmantoto tre\u0161\u0101s puses diska \u0161ifr\u0113\u0161anas pakalpojumu.<\/p>\n

S\u0101kot ar oper\u0113t\u0101jsist\u0113mas Windows 10 versiju 1803, \u0161is iestat\u012bjums tiek atbalst\u012bts tikai t\u0101m ier\u012bc\u0113m, kas pievienotas Azure Active Directory.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

At\u013caut \u0161ifr\u0113\u0161anu, kam\u0113r lietot\u0101js, kas nav administrators, ir pieteicies<\/p>\n <\/td>

\n

Atbalsta tikai Azure Active Directory pievienotaj\u0101m ier\u012bc\u0113m<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t
Redi\u0123\u0113t<\/a><\/caption>\n
\n

AppTec360 papla\u0161in\u0101jumi<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Klus\u0101 \u0161ifr\u0113\u0161ana<\/p>\n <\/td>

\n

Ja \u0161\u012b opcija tiek atz\u012bm\u0113ta kop\u0101 ar “Piepras\u012bt ier\u012bces \u0161ifr\u0113\u0161anu”, AppTec360 p\u0101rvald\u012bbas pakalpojums autom\u0101tiski veic ier\u012bces disku klusu \u0161ifr\u0113\u0161anu.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Autom\u0101tiski \u0123ener\u0113t lietot\u0101ja akredit\u0101cijas datus<\/p>\n <\/td>

\n

\u0160ifr\u0113tais OS disks tiks aizsarg\u0101ts ar autom\u0101tiski \u0123ener\u0113tiem lietot\u0101ja akredit\u0101cijas datiem.<\/p>\n

Vai nu TPM PIN kods, ja ir pieejams TPM, vai 6 ciparu teksta parole.<\/p>\n

Izveidotie akredit\u0101cijas dati tiek nos\u016bt\u012bti uz konkr\u0113tajai ier\u012bcei re\u0123istr\u0113to e-pasta adresi.<\/p>\n

Ja \u0161\u012b opcija ir izsl\u0113gta, vien\u012bg\u0101 iesp\u0113jam\u0101 aizsardz\u012bba klusajai \u0161ifr\u0113\u0161anai ir TPM izmanto\u0161ana.<\/p>\n

T\u0101d\u0101 gad\u012bjum\u0101 ier\u012bc\u0113s bez TPM klus\u0101 \u0161ifr\u0113\u0161ana neizdosies.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Fiks\u0113to disku \u0161ifr\u0113\u0161ana<\/p>\n <\/td>

\n

Visi pieejamie fiks\u0113tie datu diski ar\u012b tiks \u0161ifr\u0113ti un aizsarg\u0101ti ar “Autom\u0101tisko atblo\u0137\u0113\u0161anu”, izmantojot OS disk\u0101 saglab\u0101to atsl\u0113gu.<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t
Redi\u0123\u0113t<\/a><\/caption>\n
\n

OS diska iestat\u012bjumi<\/strong><\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Redi\u0123\u0113t<\/a><\/caption>\n
\n

Piepras\u012bt papildu autentifik\u0101ciju palai\u0161anas laik\u0101<\/p>\n <\/td>

\n

\u0160is iestat\u012bjums \u013cauj konfigur\u0113t, vai BitLocker pieprasa autentifik\u0101ciju katru reizi, kad tiek palaists dators.<\/p>\n

\u0160is iestat\u012bjums tiek piem\u0113rots, iestatot programmu BitLocker.<\/p>\n

Ja iesp\u0113jojat \u0161o iestat\u012bjumu, lietot\u0101ji var konfigur\u0113t papla\u0161in\u0101tas palai\u0161anas opcijas BitLocker iestat\u012b\u0161anas vedn\u012b.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

BitLocker blo\u0137\u0113\u0161ana bez sader\u012bga TPM<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Tikai TPM<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM un PIN kods<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM un atsl\u0113ga<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM, atsl\u0113ga un PIN kods<\/p>\n <\/td>

\n

Ja v\u0113laties piepras\u012bt PIN koda un USB zibatmi\u0146as ier\u012bces (atsl\u0113gas) izmanto\u0161anu, lietot\u0101jam j\u0101iestata BitLocker, izmantojot komandrindas r\u012bku “manage-bde”, nevis BitLocker diska \u0161ifr\u0113\u0161anas iestat\u012b\u0161anas vedni.<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t
Redi\u0123\u0113t<\/a><\/caption>\n
\n

Piepras\u012bt minim\u0101lo PIN koda garumu<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Minim\u0101lais rakstz\u012bmju skaits<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t
Redi\u0123\u0113t<\/a><\/caption>\n
\n

Konfigur\u0113t pirmsstart\u0113\u0161anas atkop\u0161anas zi\u0146ojumu un URL<\/p>\n <\/td>

\n

Konfigur\u0113jiet visu atkop\u0161anas zi\u0146ojumu vai nomainiet eso\u0161o URL, kas tiek par\u0101d\u012bts pirmsstart\u0113\u0161anas atsl\u0113gas atkop\u0161anas ekr\u0101n\u0101, kad OS disks ir blo\u0137\u0113ts.<\/p>\n

Piez\u012bme: Pirmsstart\u0113\u0161anas re\u017e\u012bm\u0101 tiek atbalst\u012btas ne visas rakstz\u012bmes un valodas. Ieteicams p\u0101rbaud\u012bt, vai lietot\u0101s rakstz\u012bmes pirmsuzk\u013c\u016b\u0161anas atkop\u0161anas ekr\u0101n\u0101 tiek par\u0101d\u012btas pareizi. <\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Atkop\u0161anas zi\u0146ojuma opcija pirms palai\u0161anas<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Piel\u0101gota atg\u016b\u0161anas zi\u0146a<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Piel\u0101gotais atkop\u0161anas URL<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Redi\u0123\u0113t<\/a><\/caption>\n
\n

OS diska atg\u016b\u0161anas iesp\u0113jas<\/p>\n <\/td>

\n

\u0160is iestat\u012bjums \u013cauj kontrol\u0113t, k\u0101 ar BitLocker aizsarg\u0101tie oper\u0113t\u0101jsist\u0113mas diski tiek atjaunoti, ja nav nepiecie\u0161amo pilnvaru.<\/p>\n

\u0160is iestat\u012bjums tiek piem\u0113rots, iestatot programmu BitLocker.<\/p>\n

P\u0113c noklus\u0113juma ir at\u013cauts uz sertifik\u0101tu balst\u012bts datu atg\u016b\u0161anas a\u0123ents, atg\u016b\u0161anas opcijas var nor\u0101d\u012bt lietot\u0101js, tostarp atg\u016b\u0161anas paroli un atg\u016b\u0161anas atsl\u0113gu, un atg\u016b\u0161anas inform\u0101cija netiek dubl\u0113ta AD DS.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Uz bloka sertifik\u0101tu balst\u012bts datu atg\u016b\u0161anas a\u0123ents<\/p>\n <\/td>

\n

Nor\u0101diet, vai datu atg\u016b\u0161anas a\u0123entu var izmantot ar BitLocker aizsarg\u0101tiem oper\u0113t\u0101jsist\u0113mas diskiem.<\/p>\n

Pirms datu atg\u016b\u0161anas a\u0123ents var tikt izmantots, tas ir j\u0101pievieno no elementa Publisko atsl\u0113gu politikas grupas politikas p\u0101rvald\u012bbas konsol\u0113 vai viet\u0113j\u0101s grupas politikas redaktor\u0101.<\/p>\n

Lai ieg\u016btu vair\u0101k inform\u0101cijas par datu atjauno\u0161anas a\u0123entu pievieno\u0161anu, skatiet BitLocker diska \u0161ifr\u0113\u0161anas izvieto\u0161anas rokasgr\u0101matu Microsoft TechNet.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

BitLocker atg\u016b\u0161anas paroles iestat\u012bjumi<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

BitLocker atkop\u0161anas atsl\u0113gas iestat\u012bjumi<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

BitLocker atg\u016b\u0161anas inform\u0101cijas saglab\u0101\u0161ana Active Directory dom\u0113na pakalpojumos<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

AD DS BitLocker atg\u016b\u0161anas kr\u0101tuves konfigur\u0101cija<\/p>\n <\/td>

\n

Atsl\u0113gas paketes glab\u0101\u0161ana pal\u012bdz atjaunot datus no diska, kas ir fiziski boj\u0101ts.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Piepras\u012bt atg\u016b\u0161anas datu glab\u0101\u0161anu AD DS<\/p>\n <\/td>

\n

Ne\u013caut lietot\u0101jiem iesl\u0113gt BitLocker, ja vien dators nav savienots ar dom\u0113nu un<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Redi\u0123\u0113t<\/a><\/caption>\n
\n

Fiks\u0113tie diska iestat\u012bjumi<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Fiks\u0113to disku atg\u016b\u0161anas iesp\u0113jas<\/p>\n <\/td>

\n

\u0160is iestat\u012bjums \u013cauj kontrol\u0113t, k\u0101 ar BitLocker aizsarg\u0101tie fiks\u0113tie diski tiek atjaunoti, ja nav nepiecie\u0161amo pilnvaru.<\/p>\n

\u0160is iestat\u012bjums tiek piem\u0113rots, iestatot programmu BitLocker.<\/p>\n

P\u0113c noklus\u0113juma ir at\u013cauts uz sertifik\u0101tu balst\u012bts datu atg\u016b\u0161anas a\u0123ents, atg\u016b\u0161anas opcijas var nor\u0101d\u012bt lietot\u0101js, tostarp atg\u016b\u0161anas paroli un atg\u016b\u0161anas atsl\u0113gu, un atg\u016b\u0161anas inform\u0101cija netiek dubl\u0113ta AD DS.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Uz bloka sertifik\u0101tu balst\u012bts datu atg\u016b\u0161anas a\u0123ents<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

BitLocker atg\u016b\u0161anas paroles iestat\u012bjumi<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

BitLocker atkop\u0161anas atsl\u0113gas iestat\u012bjumi<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

BitLocker atg\u016b\u0161anas inform\u0101cijas saglab\u0101\u0161ana Active Directory dom\u0113na pakalpojumos<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

AD DS BitLocker atg\u016b\u0161anas kr\u0101tuves konfigur\u0101cija<\/p>\n <\/td>

\n

Atsl\u0113gas paketes glab\u0101\u0161ana pal\u012bdz atjaunot datus no diska, kas ir fiziski boj\u0101ts.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Piepras\u012bt atg\u016b\u0161anas datu glab\u0101\u0161anu AD DS<\/p>\n <\/td>

\n

Ne\u013caujiet lietot\u0101jiem iesl\u0113gt BitLocker, ja vien dators nav savienots ar dom\u0113nu un BitLocker atjauno\u0161anas inform\u0101cijas dubl\u0113jums AD DS nav sekm\u012bgi izveidots.<\/p>\n

Piez\u012bme: Atjauno\u0161anas parole tiek \u0123ener\u0113ta autom\u0101tiski.<\/p>\n <\/td>\n<\/tr>\n

\n

Aizliegt rakst\u012b\u0161anas piek\u013cuvi neaizsarg\u0101tiem fiks\u0113tajiem diskiem<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t
Redi\u0123\u0113t<\/a><\/caption>\n
\n

No\u0146emam\u0101 diska iestat\u012bjumi<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Aizliegt rakst\u012b\u0161anas piek\u013cuvi neaizsarg\u0101tiem no\u0146emamiem diskiem<\/p>\n <\/td>

\n

Aizliegt rakst\u012b\u0161anas piek\u013cuvi no\u0146emamiem datu diskiem, kas nav aizsarg\u0101ti ar Bitlocker. Piez\u012bme: Ja “Removable Disks: Deny write access” grupas politik\u0101 ir iesp\u0113jota, \u0161is politikas iestat\u012bjums tiks ignor\u0113ts. <\/p>\n <\/td>\n<\/tr>\n

\n

Aizliegt rakst\u012b\u0161anas piek\u013cuvi ier\u012bc\u0113m, kas konfigur\u0113tas cit\u0101 organiz\u0101cij\u0101<\/p>\n <\/td>

\n

Tikai tiem diskiem, kuru identifik\u0101cijas lauki atbilst datora identifik\u0101cijas laukiem, tiks pie\u0161\u0137irta rakst\u012b\u0161anas piek\u013cuve. \u0160ie lauki ir defin\u0113ti grupas politikas iestat\u012bjum\u0101 “Nodro\u0161in\u0101t unik\u0101los identifikatorus j\u016bsu organiz\u0101cijai”. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n","protected":false},"parent":38974,"menu_order":0,"template":"","class_list":["post-38973","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/lv\/wp-json\/wp\/v2\/knowledgebase\/38973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/lv\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/lv\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":2,"href":"https:\/\/kb.apptec360.com\/manual\/lv\/wp-json\/wp\/v2\/knowledgebase\/38973\/revisions"}],"predecessor-version":[{"id":40257,"href":"https:\/\/kb.apptec360.com\/manual\/lv\/wp-json\/wp\/v2\/knowledgebase\/38973\/revisions\/40257"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/lv\/wp-json\/wp\/v2\/knowledgebase\/38974"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/lv\/wp-json\/wp\/v2\/media?parent=38973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}