BitLocker software encryption slows performance#

BitLocker software encryption slows performance#

Environment

RAID Model:  SR-1000, SR-1001, SR-1010
Host Hardware:  AMD, Intel, Arm
Operating Systems:  Windows

Issue

When bitlocker enable would got the slows performance SSD, including SupremeRAID solution.(performance drop more than 50% when execute random workload)

Resolution

This is a known issue when BitLocker function is enabled. It may reduce performance by up to 50%. If the user values performance over encryption, please disable BitLocker function.

Disable bitlocker through Windows Command Prompt

To disable bitlocker using command line, ensure that you have logged onto Admin user account to turn off bitlocker encryption. Follow the steps given below to turn off bitlocker encryption using Command Prompt.

  1. Open Command prompt in Administrator mode.
  2. To check the status of BitLocker encryption in the system execute the command given below.

    manage-bde -status

  3. Ensure that the results for the required drives(C:, D:, etc) are as follows.

    Conversion Status : Fully Decrypted

    Percentage Encrypted : 0.0%

    Remove bitlocker from Windows 10

  4. If the result is "Percentage Encrypted : 100.0%", decrypt the BitLocker for the required drives using the commands given below.

    manage-bde -off <drive letter>:

    E.g.: manage-bde -off C:
  5. Check the BitLocker status after disabling using the command (manage-bde -status) and ensure that the "Percentage Encrypted : 0.0%"
  6. Restart your computer, before proceeding with the image creation process.

Disable bitlocker through Windows GUI mode

To remove bitlocker using Windows GUI mode, ensure that you have administrator credentials to remove bitlocker encryption. Follow the steps given below to remove bitlocker encryption in GUI mode,

  1. Click Start, click Control Panel, click System and Security, and then click BitLocker Drive Encryption.

    Remove bitlocker from Windows 10

  2. Look for the drive on which you want BitLocker Drive Encryption turned off, and click Turn Off BitLocker.

    Remove bitlocker from Windows 10

  3. A message will be displayed, stating that the drive will be decrypted and that decryption may take some time. Click Turn off Bitlocker / Decrypt the drive to continue and turn off BitLocker on the drive.
  4. Restart your computer, before proceeding with the image creation process. Thus, you can disable bitlocker using command prompt.
 
This might take some time to decrypt the drive and remove BitLocker protection.


How to ensure if the Bitlocker encryption is removed?

You can ensure if the BitLocker encryption is removed by checking if the Bitlocker lock icon is removed in the particular drive and by accessing the particular drive. You can repeat the same steps to disable Bitllocker Encryption in other drives.

Disable bitlocker through Windows Powershell mode

To disable Bitlocker encryption in Windows Powershell mode, Windows Power shell must be installed in your system. If not download & install proper Windows Powershell version from Microsoft website. Also check the Powershell System requirements before proceeding installation.

Note: If the partition with the operating system contains any automatic unlocking keys, the cmdlet to disable bitlocker encryption will not work. You can use the Clear-BitLockerAutoUnlock cmdlet in Powershell window to remove all automatic unlocking keys to disable BitLocker for the partition.

How to Disable Bitlocker for all volumes?

  1. Open Windows Powershell in Administrator mode and execute the following commands 
    • PS C:\>$BLV = Get-BitLockerVolume
    • PS C:\>Disable-BitLocker -MountPoint $BLV
  2. Verify the decryption process by using below method
    • Execute command: PS C:\> Get-BitlockerVolume
    • Check decryption progress in "Volume Status"  & "Encryption Percentage". Also these values must be "FullyDecrypted" & 100%  to confirm the decryption completion.
    • or

    • Progress can be seen in Control Panel -> System and Security -> BitLocker Drive Encryption.
  3. Restart your computer, before proceeding with the image creation process.

How to Disable Bitlocker for a single volume?

  1. Open Windows Powershell in Administrator mode
  2. Disable-BitLocker -MountPoint "C:"
  3. Verify the decryption process by using below method
    • Execute the command: PS C:\> Get-BitlockerVolume -MountPoint "C:"
    • Check decryption progress in "Volume Status"  & "Encryption Percentage". Also these values must be "FullyDecrypted" & 100% to confirm the decryption completion.
    • or

    •  Progress can be seen in Control Panel -> System and Security -> BitLocker Drive Encryption . 
  4. Restart your computer, before proceeding with the image creation process.
Wait until it shows that Bit locker encryption is turned off .