{"id":48530,"date":"2024-03-28T04:56:35","date_gmt":"2024-03-28T03:56:35","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/bitlocker-configuration\/"},"modified":"2024-12-04T05:04:20","modified_gmt":"2024-12-04T04:04:20","slug":"bitlocker-configuration","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/sk\/knowledgebase\/configuration-windows-10-pc\/general\/security-management\/bitlocker\/bitlocker-configuration\/","title":{"rendered":"Konfigur\u00e1cia n\u00e1stroja BitLocker"},"content":{"rendered":"\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

V\u0161eobecn\u00e9 nastavenia<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Vy\u017eadova\u0165 \u0161ifrovanie zariadenia<\/p>\n <\/td>

\n

V z\u00e1vislosti od vydania syst\u00e9mu Windows a konfigur\u00e1cie syst\u00e9mu sa pou\u017e\u00edvate\u013eom m\u00f4\u017ee zobrazi\u0165 v\u00fdzva na zapnutie \u0161ifrovania zariadenia:<\/p>\n

– Potvrdenie, \u017ee \u0161ifrovanie od in\u00e9ho poskytovate\u013ea nie je povolen\u00e9.<\/p>\n

– Vypnutie funkcie BitLocker Drive Encryption a n\u00e1sledn\u00e9 zapnutie funkcie BitLocker.<\/p>\n <\/td>\n<\/tr>\n

\n

Met\u00f3dy \u0161ifrovania<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Met\u00f3da \u0161ifrovania diskov opera\u010dn\u00e9ho syst\u00e9mu<\/p>\n <\/td>

<\/td>\n<\/tr>\n
<\/td>\n

Met\u00f3da \u0161ifrovania pevn\u00fdch d\u00e1tov\u00fdch jednotiek<\/p>\n <\/td>

<\/td>\n<\/tr>\n
<\/td>\n

Met\u00f3da \u0161ifrovania vymenite\u013en\u00fdch d\u00e1tov\u00fdch diskov<\/p>\n <\/td>

<\/td>\n<\/tr>\n
\n

Zak\u00e1zanie upozornenia na \u0161ifrovanie disku tre\u0165ou stranou<\/p>\n <\/td>

\n

Zak\u00e1zanie v\u00fdstra\u017en\u00e9ho hl\u00e1senia o slu\u017ebe \u0161ifrovania disku tretej strany, ktor\u00e1 sa pou\u017e\u00edva v zariaden\u00ed.<\/p>\n

Od verzie 1803 syst\u00e9mu Windows 10 je toto nastavenie podporovan\u00e9 len pre zariadenia pripojen\u00e9 k slu\u017ebe Azure Active Directory.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Povolenie sp\u00fa\u0161\u0165ania \u0161ifrovania, ke\u010f je prihl\u00e1sen\u00fd pou\u017e\u00edvate\u013e, ktor\u00fd nie je spr\u00e1vcom<\/p>\n <\/td>

\n

Podporovan\u00e9 len pre zariadenia pripojen\u00e9 k slu\u017ebe Azure Active Directory<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Roz\u0161\u00edrenia AppTec360<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Tich\u00e9 \u0161ifrovanie<\/p>\n <\/td>

\n

Ak sa vyberie mo\u017enos\u0165 „Vy\u017eadova\u0165 \u0161ifrovanie zariadenia“, slu\u017eba AppTec360 Management Service spust\u00ed automatick\u00e9 tich\u00e9 \u0161ifrovanie diskov zariadenia.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Automatick\u00e9 generovanie poveren\u00ed pou\u017e\u00edvate\u013ea<\/p>\n <\/td>

\n

\u0160ifrovan\u00fd disk opera\u010dn\u00e9ho syst\u00e9mu bude chr\u00e1nen\u00fd automaticky generovan\u00fdmi povereniami pou\u017e\u00edvate\u013ea.<\/p>\n

Bu\u010f k\u00f3d PIN \u010dipu TPM, ak je \u010dip TPM k dispoz\u00edcii, alebo 6-miestne textov\u00e9 heslo.<\/p>\n

Vygenerovan\u00e9 poverenia sa odo\u0161l\u00fa na e-mailov\u00fa adresu registrovan\u00fa pre dan\u00e9 zariadenie.<\/p>\n

Ak je t\u00e1to mo\u017enos\u0165 vypnut\u00e1, jedinou mo\u017enou ochranou pre tich\u00e9 \u0161ifrovanie je pou\u017eitie TPM.<\/p>\n

V takom pr\u00edpade sa v pr\u00edpade zariaden\u00ed bez \u010dipu TPM tich\u00e9 \u0161ifrovanie nepodar\u00ed.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

\u0160ifrovanie pevn\u00fdch diskov<\/p>\n <\/td>

\n

V\u0161etky dostupn\u00e9 pevn\u00e9 d\u00e1tov\u00e9 disky bud\u00fa tie\u017e za\u0161ifrovan\u00e9 a chr\u00e1nen\u00e9 funkciou „Automatick\u00e9 odomknutie“ pomocou k\u013e\u00fa\u010da ulo\u017een\u00e9ho na disku opera\u010dn\u00e9ho syst\u00e9mu.<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Nastavenia jednotky OS<\/strong><\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Vy\u017eadovanie dodato\u010dn\u00e9ho overenia pri spusten\u00ed<\/p>\n <\/td>

\n

Toto nastavenie umo\u017e\u0148uje nakonfigurova\u0165, \u010di n\u00e1stroj BitLocker vy\u017eaduje overenie pri ka\u017edom spusten\u00ed po\u010d\u00edta\u010da.<\/p>\n

Toto nastavenie sa pou\u017eije po\u010das nastavenia n\u00e1stroja BitLocker.<\/p>\n

Ak toto nastavenie povol\u00edte, pou\u017e\u00edvatelia m\u00f4\u017eu v sprievodcovi nastaven\u00edm n\u00e1stroja BitLocker konfigurova\u0165 roz\u0161\u00edren\u00e9 mo\u017enosti sp\u00fa\u0161\u0165ania.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Blokovanie n\u00e1stroja BitLocker bez kompatibiln\u00e9ho \u010dipu TPM<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Len TPM<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM a PIN<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM a k\u013e\u00fa\u010d<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

TPM, k\u013e\u00fa\u010d a PIN<\/p>\n <\/td>

\n

Ak chcete vy\u017eadova\u0165 pou\u017e\u00edvanie k\u00f3du PIN a USB flash disku (k\u013e\u00fa\u010da), pou\u017e\u00edvate\u013e mus\u00ed nastavi\u0165 n\u00e1stroj BitLocker pomocou n\u00e1stroja pr\u00edkazov\u00e9ho riadka „manage-bde“ namiesto sprievodcu nastaven\u00edm n\u00e1stroja BitLocker Drive Encryption.<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Vy\u017eadova\u0165 minim\u00e1lnu d\u013a\u017eku k\u00f3du PIN<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Minim\u00e1lny po\u010det znakov<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Konfigur\u00e1cia spr\u00e1vy o obnoven\u00ed pred spusten\u00edm a adresy URL<\/p>\n <\/td>

\n

Nakonfigurujte cel\u00fa spr\u00e1vu o obnoven\u00ed alebo nahra\u010fte existuj\u00facu adresu URL, ktor\u00e1 sa zobrazuje na obrazovke obnovenia pred zaveden\u00edm k\u013e\u00fa\u010da, ke\u010f je jednotka OS uzamknut\u00e1.<\/p>\n

Pozn\u00e1mka: Nie v\u0161etky znaky a jazyky s\u00fa podporovan\u00e9 v re\u017eime pred spusten\u00edm syst\u00e9mu. D\u00f4razne sa odpor\u00fa\u010da otestova\u0165, \u010di sa znaky, ktor\u00e9 pou\u017e\u00edvate, zobrazuj\u00fa na obrazovke obnovy pred spusten\u00edm syst\u00e9mu spr\u00e1vne. <\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Mo\u017enos\u0165 spr\u00e1vy o obnoven\u00ed pred spusten\u00edm syst\u00e9mu<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Vlastn\u00e1 spr\u00e1va o obnoven\u00ed<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Vlastn\u00e1 adresa URL na obnovenie<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Mo\u017enosti obnovy jednotky OS<\/p>\n <\/td>

\n

Toto nastavenie umo\u017e\u0148uje ovl\u00e1da\u0165 sp\u00f4sob obnovy diskov opera\u010dn\u00e9ho syst\u00e9mu chr\u00e1nen\u00fdch n\u00e1strojom BitLocker v pr\u00edpade, \u017ee nie s\u00fa k dispoz\u00edcii po\u017eadovan\u00e9 poverenia.<\/p>\n

Toto nastavenie sa pou\u017eije po\u010das nastavenia n\u00e1stroja BitLocker.<\/p>\n

V predvolenom nastaven\u00ed je povolen\u00fd agent na obnovu \u00fadajov zalo\u017een\u00fd na certifik\u00e1te, mo\u017enosti obnovy m\u00f4\u017ee ur\u010di\u0165 pou\u017e\u00edvate\u013e vr\u00e1tane hesla na obnovu a k\u013e\u00fa\u010da na obnovu a inform\u00e1cie o obnove sa nez\u00e1lohuj\u00fa do slu\u017eby AD DS.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Agent na obnovu \u00fadajov zalo\u017een\u00fd na blokovom certifik\u00e1te<\/p>\n <\/td>

\n

Ur\u010dite, \u010di sa agent na obnovu \u00fadajov m\u00f4\u017ee pou\u017e\u00edva\u0165 s diskami opera\u010dn\u00e9ho syst\u00e9mu chr\u00e1nen\u00fdmi n\u00e1strojom BitLocker.<\/p>\n

Pred pou\u017eit\u00edm agenta na obnovu \u00fadajov ho treba prida\u0165 z polo\u017eky Z\u00e1sady verejn\u00e9ho k\u013e\u00fa\u010da v konzole na spr\u00e1vu z\u00e1sad skupiny alebo v editore miestnych z\u00e1sad skupiny.<\/p>\n

\u010eal\u0161ie inform\u00e1cie o prid\u00e1van\u00ed agentov na obnovu \u00fadajov n\u00e1jdete v pr\u00edru\u010dke BitLocker Drive Encryption Deployment Guide na str\u00e1nke Microsoft TechNet.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Nastavenia hesla pre obnovenie n\u00e1stroja BitLocker<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Nastavenia k\u013e\u00fa\u010da na obnovenie n\u00e1stroja BitLocker<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Ulo\u017eenie inform\u00e1ci\u00ed o obnoven\u00ed n\u00e1stroja BitLocker do slu\u017eby Active Directory Domain Services<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Konfigur\u00e1cia \u00falo\u017eiska na obnovenie n\u00e1stroja AD DS BitLocker<\/p>\n <\/td>

\n

Ulo\u017eenie bal\u00edka k\u013e\u00fa\u010dov podporuje obnovu \u00fadajov z jednotky, ktor\u00e1 bola fyzicky po\u0161koden\u00e1.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Po\u017eiadavka na ukladanie \u00fadajov o obnove do slu\u017eby AD DS<\/p>\n <\/td>

\n

Zabr\u00e1\u0148te pou\u017e\u00edvate\u013eom zapn\u00fa\u0165 n\u00e1stroj BitLocker, pokia\u013e po\u010d\u00edta\u010d nie je pripojen\u00fd k dom\u00e9ne a<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Pevn\u00e9 nastavenia pohonu<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Mo\u017enosti obnovy pevn\u00fdch diskov<\/p>\n <\/td>

\n

Toto nastavenie umo\u017e\u0148uje ovl\u00e1da\u0165 sp\u00f4sob obnovy pevn\u00fdch diskov chr\u00e1nen\u00fdch n\u00e1strojom BitLocker v pr\u00edpade, \u017ee nie s\u00fa k dispoz\u00edcii po\u017eadovan\u00e9 poverenia.<\/p>\n

Toto nastavenie sa pou\u017eije po\u010das nastavenia n\u00e1stroja BitLocker.<\/p>\n

V predvolenom nastaven\u00ed je povolen\u00fd agent na obnovu \u00fadajov zalo\u017een\u00fd na certifik\u00e1te, mo\u017enosti obnovy m\u00f4\u017ee ur\u010di\u0165 pou\u017e\u00edvate\u013e vr\u00e1tane hesla na obnovu a k\u013e\u00fa\u010da na obnovu a inform\u00e1cie o obnove sa nez\u00e1lohuj\u00fa do slu\u017eby AD DS.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Agent na obnovu \u00fadajov zalo\u017een\u00fd na blokovom certifik\u00e1te<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Nastavenia hesla pre obnovenie n\u00e1stroja BitLocker<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Nastavenia k\u013e\u00fa\u010da na obnovenie n\u00e1stroja BitLocker<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Ulo\u017eenie inform\u00e1ci\u00ed o obnoven\u00ed n\u00e1stroja BitLocker do slu\u017eby Active Directory Domain Services<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Konfigur\u00e1cia \u00falo\u017eiska na obnovenie n\u00e1stroja AD DS BitLocker<\/p>\n <\/td>

\n

Ulo\u017eenie bal\u00edka k\u013e\u00fa\u010dov podporuje obnovu \u00fadajov z jednotky, ktor\u00e1 bola fyzicky po\u0161koden\u00e1.<\/p>\n <\/td>\n<\/tr>\n

<\/td>\n

Po\u017eiadavka na ukladanie \u00fadajov o obnove do slu\u017eby AD DS<\/p>\n <\/td>

\n

Zabr\u00e1\u0148te pou\u017e\u00edvate\u013eom zapn\u00fa\u0165 n\u00e1stroj BitLocker, pokia\u013e po\u010d\u00edta\u010d nie je pripojen\u00fd k dom\u00e9ne a pokia\u013e sa nepodar\u00ed z\u00e1lohova\u0165 inform\u00e1cie o obnoven\u00ed n\u00e1stroja BitLocker do slu\u017eby AD DS.<\/p>\n

Pozn\u00e1mka: Heslo na obnovenie sa generuje automaticky.<\/p>\n <\/td>\n<\/tr>\n

\n

Odmietnutie pr\u00edstupu k nechr\u00e1nen\u00fdm pevn\u00fdm diskom<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\t\n\t\n\t
Upravi\u0165<\/a><\/caption>\n
\n

Nastavenia vymenite\u013en\u00e9ho disku<\/strong><\/p>\n <\/td>\n<\/tr>\n

\n

Odmietnutie pr\u00edstupu k z\u00e1pisu na nechr\u00e1nen\u00e9 vymenite\u013en\u00e9 jednotky<\/p>\n <\/td>

\n

Odmietnutie pr\u00edstupu k vymenite\u013en\u00fdm d\u00e1tov\u00fdm jednotk\u00e1m, ktor\u00e9 nie s\u00fa chr\u00e1nen\u00e9 programom Bitlocker. Pozn\u00e1mka: Ak „Vymenite\u013en\u00e9 disky: Odmietnu\u0165 pr\u00edstup k z\u00e1pisu“ je v z\u00e1sad\u00e1ch skupiny povolen\u00e1, toto nastavenie z\u00e1sad sa bude ignorova\u0165. <\/p>\n <\/td>\n<\/tr>\n

\n

Odmietnutie pr\u00edstupu k z\u00e1pisu do zariaden\u00ed nakonfigurovan\u00fdch v inej organiz\u00e1cii<\/p>\n <\/td>

\n

Pr\u00edstup na z\u00e1pis bud\u00fa ma\u0165 len jednotky s identifika\u010dn\u00fdmi po\u013eami zhodn\u00fdmi s identifika\u010dn\u00fdmi po\u013eami po\u010d\u00edta\u010da. Tieto polia s\u00fa definovan\u00e9 nastaven\u00edm z\u00e1sad skupiny „Poskytn\u00fa\u0165 jedine\u010dn\u00e9 identifik\u00e1tory pre va\u0161u organiz\u00e1ciu“. <\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

<\/div>\n","protected":false},"parent":48531,"menu_order":0,"template":"","class_list":["post-48530","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase\/48530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":2,"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase\/48530\/revisions"}],"predecessor-version":[{"id":50191,"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase\/48530\/revisions\/50191"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/knowledgebase\/48531"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/sk\/wp-json\/wp\/v2\/media?parent=48530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}