BitLocker software encryption slows performance#

BitLocker software encryption slows performance#

Environment

RAID Model:  SR-1000, SR-1001, SR-1010
Host Hardware:  AMD, Intel, Arm
Operating Systems:  Windows

Issue

When bitlocker enable would got the slows performance SSD, including SupremeRAID solution.(performance drop more than 50% when execute random workload)

Resolution

This is a known issue when BitLocker function is enabled. It may reduce performance by up to 50%. If the user values performance over encryption, please disable BitLocker function.

Disable bitlocker through Windows Command Prompt

To disable bitlocker using command line, ensure that you have logged onto Admin user account to turn off bitlocker encryption. Follow the steps given below to turn off bitlocker encryption using Command Prompt.

  1. Open Command prompt in Administrator mode.
  2. To check the status of BitLocker encryption in the system execute the command given below.

    manage-bde -status

  3. Ensure that the results for the required drives(C:, D:, etc) are as follows.

    Conversion Status : Fully Decrypted

    Percentage Encrypted : 0.0%

    Remove bitlocker from Windows 10

  4. If the result is "Percentage Encrypted : 100.0%", decrypt the BitLocker for the required drives using the commands given below.

    manage-bde -off <drive letter>:

    E.g.: manage-bde -off C:
  5. Check the BitLocker status after disabling using the command (manage-bde -status) and ensure that the "Percentage Encrypted : 0.0%"
  6. Restart your computer, before proceeding with the image creation process.

Disable bitlocker through Windows GUI mode

To remove bitlocker using Windows GUI mode, ensure that you have administrator credentials to remove bitlocker encryption. Follow the steps given below to remove bitlocker encryption in GUI mode,

  1. Click Start, click Control Panel, click System and Security, and then click BitLocker Drive Encryption.

    Remove bitlocker from Windows 10

  2. Look for the drive on which you want BitLocker Drive Encryption turned off, and click Turn Off BitLocker.

    Remove bitlocker from Windows 10

  3. A message will be displayed, stating that the drive will be decrypted and that decryption may take some time. Click Turn off Bitlocker / Decrypt the drive to continue and turn off BitLocker on the drive.
  4. Restart your computer, before proceeding with the image creation process. Thus, you can disable bitlocker using command prompt.
 
This might take some time to decrypt the drive and remove BitLocker protection.


How to ensure if the Bitlocker encryption is removed?

You can ensure if the BitLocker encryption is removed by checking if the Bitlocker lock icon is removed in the particular drive and by accessing the particular drive. You can repeat the same steps to disable Bitllocker Encryption in other drives.

Disable bitlocker through Windows Powershell mode

To disable Bitlocker encryption in Windows Powershell mode, Windows Power shell must be installed in your system. If not download & install proper Windows Powershell version from Microsoft website. Also check the Powershell System requirements before proceeding installation.

Note: If the partition with the operating system contains any automatic unlocking keys, the cmdlet to disable bitlocker encryption will not work. You can use the Clear-BitLockerAutoUnlock cmdlet in Powershell window to remove all automatic unlocking keys to disable BitLocker for the partition.

How to Disable Bitlocker for all volumes?

  1. Open Windows Powershell in Administrator mode and execute the following commands 
    • PS C:\>$BLV = Get-BitLockerVolume
    • PS C:\>Disable-BitLocker -MountPoint $BLV
  2. Verify the decryption process by using below method
    • Execute command: PS C:\> Get-BitlockerVolume
    • Check decryption progress in "Volume Status"  & "Encryption Percentage". Also these values must be "FullyDecrypted" & 100%  to confirm the decryption completion.
    • or

    • Progress can be seen in Control Panel -> System and Security -> BitLocker Drive Encryption.
  3. Restart your computer, before proceeding with the image creation process.

How to Disable Bitlocker for a single volume?

  1. Open Windows Powershell in Administrator mode
  2. Disable-BitLocker -MountPoint "C:"
  3. Verify the decryption process by using below method
    • Execute the command: PS C:\> Get-BitlockerVolume -MountPoint "C:"
    • Check decryption progress in "Volume Status"  & "Encryption Percentage". Also these values must be "FullyDecrypted" & 100% to confirm the decryption completion.
    • or

    •  Progress can be seen in Control Panel -> System and Security -> BitLocker Drive Encryption . 
  4. Restart your computer, before proceeding with the image creation process.
Wait until it shows that Bit locker encryption is turned off . 





    • Related Articles

    • How to get basic information form Graid log collection tool(Windows)?#

      Environment RAID Model: All Host Hardware: AMD/Intel/Supermicro model etc Operating System: Linux Issue This script collects config and log information that graid support require to be able to troublshoot issues effectively. Resolution 1. Download ...
    • How to Configure Hyper-V with SupremeRAID RAID as a Datastore for Virtual Machines #

      Environment RAID Model: All Supreme RAID model Host Hardware: AMD/Intel Operating System: Windows Server 2019 and 2022 Description Virtualization has become an essential tool for modern computing, enabling multiple virtual machines (VMs) to operate ...
    • Creating a new case: What information to collect#

      Environment All cases Issue Gathering enough data to be able to assess cases without resorting to multiple repeat communications to obtain diagnostic information. Resolution When creating a new case and be able to provide the fastest, most accurate ...
    • SupremeRAID™ OS Support List#

      Supported Linux Disctributions and Windows Versions Linux Distribution x86_64 AlmaLinux 8.5, 8.6, 8.7 (kernel 4.18) CentOS 7.9 (Kernel 3.10 and 4.18), 8.3, 8.4, 8.5 (Kernel 4.18) Debian 11.6 (Kernel 5.10) openSUSE Leap 15.2, 15.3 (Kernel 5.3) Oracle ...
    • How to enable mail notification with SupremeRAID#

      Environment RAID Model: SR1000 or SR1010, SR1001 Host Hardware: Intel, AMD Operating System: Linux / Windows Issue Mail notification Resolution Linux Email Notification Agent deb (opens new window)rpm Windows Mail Notification Agent ...