Im facing issues while encrypting the virtual DC's (ESXi). I mean after the encryption, our DC's are crashing.
We have the below configurations. Please note that we are storing the AD database & logs in different drives
HDD: Single vHD file
Drives: C:\ OS, D: AD Logs, E:\AD Database
Please find the steps which I followed, pls let me know if I need to make any corrections.
Install Bitloker & reboot
Update GPO to allow BitLocker without TPM
3. Add protectors for C drive & apply boot password
manage-bde c: -on -encryptionmethod aes256 -Password -RecoveryPassword -RemoveVolumeShadowCopies
- Reboot DC
- At this stage, DC will prompt for Bitlocker password and it is booting successfully
6. After login to DC, Add protectors and encrypt pending drives
D: -on -encryptionmethod aes256 -Password -RecoveryPassword -RemoveVolumeShadowCopies
7. Enable auto unlock for other Drives (D:, E:)
manage-bde -autounlock -enable d:
After completing the entire encryption process, and if I reboot the DC I could see that the DC is crashing and I will have to decrypt the entire Drives to login.