mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-24 06:43:38 +00:00
Html to md table conversion - batch 26
This commit is contained in:
Alekhya Jupudi
@ -184,132 +184,20 @@ manage-bde -on C:
|
||||
|
||||
Windows PowerShell cmdlets provide an alternative way to work with BitLocker. Using Windows PowerShell's scripting capabilities, administrators can integrate BitLocker options into existing scripts with ease. The list below displays the available BitLocker cmdlets.
|
||||
|
||||
<table>
|
||||
<colgroup>
|
||||
<col width="50%" />
|
||||
<col width="50%" />
|
||||
</colgroup>
|
||||
<tbody>
|
||||
<tr class="odd">
|
||||
<td align="left"><p>Name</p></td>
|
||||
<td align="left"><p>Parameters</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><strong>Add-BitLockerKeyProtector</strong></p></td>
|
||||
<td align="left"><p>-ADAccountOrGroup</p>
|
||||
<p>-ADAccountOrGroupProtector</p>
|
||||
<p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-Password</p>
|
||||
<p>-PasswordProtector</p>
|
||||
<p>-Pin</p>
|
||||
<p>-RecoveryKeyPath</p>
|
||||
<p>-RecoveryKeyProtector</p>
|
||||
<p>-RecoveryPassword</p>
|
||||
<p>-RecoveryPasswordProtector</p>
|
||||
<p>-Service</p>
|
||||
<p>-StartupKeyPath</p>
|
||||
<p>-StartupKeyProtector</p>
|
||||
<p>-TpmAndPinAndStartupKeyProtector</p>
|
||||
<p>-TpmAndPinProtector</p>
|
||||
<p>-TpmAndStartupKeyProtector</p>
|
||||
<p>-TpmProtector</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><strong>Backup-BitLockerKeyProtector</strong></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-KeyProtectorId</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><strong>Disable-BitLocker</strong></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><strong>Disable-BitLockerAutoUnlock</strong></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><strong>Enable-BitLocker</strong></p></td>
|
||||
<td align="left"><p>-AdAccountOrGroup</p>
|
||||
<p>-AdAccountOrGroupProtector</p>
|
||||
<p>-Confirm</p>
|
||||
<p>-EncryptionMethod</p>
|
||||
<p>-HardwareEncryption</p>
|
||||
<p>-Password</p>
|
||||
<p>-PasswordProtector</p>
|
||||
<p>-Pin</p>
|
||||
<p>-RecoveryKeyPath</p>
|
||||
<p>-RecoveryKeyProtector</p>
|
||||
<p>-RecoveryPassword</p>
|
||||
<p>-RecoveryPasswordProtector</p>
|
||||
<p>-Service</p>
|
||||
<p>-SkipHardwareTest</p>
|
||||
<p>-StartupKeyPath</p>
|
||||
<p>-StartupKeyProtector</p>
|
||||
<p>-TpmAndPinAndStartupKeyProtector</p>
|
||||
<p>-TpmAndPinProtector</p>
|
||||
<p>-TpmAndStartupKeyProtector</p>
|
||||
<p>-TpmProtector</p>
|
||||
<p>-UsedSpaceOnly</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><strong>Enable-BitLockerAutoUnlock</strong></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><strong>Get-BitLockerVolume</strong></p></td>
|
||||
<td align="left"><p>-MountPoint</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><strong>Lock-BitLocker</strong></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-ForceDismount</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><strong>Remove-BitLockerKeyProtector</strong></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-KeyProtectorId</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><strong>Resume-BitLocker</strong></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><strong>Suspend-BitLocker</strong></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-RebootCount</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><strong>Unlock-BitLocker</strong></p></td>
|
||||
<td align="left"><p>-AdAccountOrGroup</p>
|
||||
<p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-Password</p>
|
||||
<p>-RecoveryKeyPath</p>
|
||||
<p>-RecoveryPassword</p>
|
||||
<p>-RecoveryPassword</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|Name|Parameters|
|
||||
|--- |--- |
|
||||
|**Add-BitLockerKeyProtector**|<li>ADAccountOrGroup<li>ADAccountOrGroupProtector<li>Confirm<li>MountPoint<li>Password<li>PasswordProtector<li>Pin<li>RecoveryKeyPath<li>RecoveryKeyProtector<li>RecoveryPassword<li>RecoveryPasswordProtector<li>Service<li>StartupKeyPath<li>StartupKeyProtector<li>TpmAndPinAndStartupKeyProtector<li>TpmAndPinProtector<li>TpmAndStartupKeyProtector<li>TpmProtector<li>WhatIf|
|
||||
|**Backup-BitLockerKeyProtector**|<li>Confirm<li>KeyProtectorId<li>MountPoint<li>WhatIf|
|
||||
|**Disable-BitLocker**|<li>Confirm<li>MountPoint<li>WhatIf|
|
||||
|**Disable-BitLockerAutoUnlock**|<li>Confirm<li>MountPoint<li>WhatIf|
|
||||
|**Enable-BitLocker**|<li>AdAccountOrGroup<li>AdAccountOrGroupProtector<li>Confirm<li>EncryptionMethod<li>HardwareEncryption<li>Password<li>PasswordProtector<li>Pin<li>RecoveryKeyPath<li>RecoveryKeyProtector<li>RecoveryPassword<li>RecoveryPasswordProtector<li>Service<li>SkipHardwareTest<li>StartupKeyPath<li>StartupKeyProtector<li>TpmAndPinAndStartupKeyProtector<li>TpmAndPinProtector<li>TpmAndStartupKeyProtector<li>TpmProtector<li>UsedSpaceOnly<li>WhatIf|
|
||||
|**Enable-BitLockerAutoUnlock**|<li>Confirm<li>MountPoint<li>WhatIf|
|
||||
|**Get-BitLockerVolume**|<li>MountPoint|
|
||||
|**Lock-BitLocker**|<li>Confirm<li>ForceDismount<li>MountPoint<li>WhatIf|
|
||||
|**Remove-BitLockerKeyProtector**|<li>Confirm<li>KeyProtectorId<li>MountPoint<li>WhatIf|
|
||||
|**Resume-BitLocker**|<li>Confirm<li>MountPoint<li>WhatIf|
|
||||
|**Suspend-BitLocker**|<li>Confirm<li>MountPoint<li>RebootCount<li>WhatIf|
|
||||
|**Unlock-BitLocker**|<li>AdAccountOrGroup<li>Confirm<li>MountPoint<li>Password<li>RecoveryKeyPath<li>RecoveryPassword<li>RecoveryPassword<li>WhatIf|
|
||||
|
||||
Similar to manage-bde, the Windows PowerShell cmdlets allow configuration beyond the options offered in the control panel. As with manage-bde, users need to consider the specific needs of the volume they are encrypting prior to running Windows PowerShell cmdlets.
|
||||
|
||||
|
||||
@ -128,134 +128,20 @@ For more information about using repair-bde, see [Repair-bde](/previous-versions
|
||||
|
||||
Windows PowerShell cmdlets provide a new way for administrators to use when working with BitLocker. Using Windows PowerShell's scripting capabilities, administrators can integrate BitLocker options into existing scripts with ease. The list below displays the available BitLocker cmdlets.
|
||||
|
||||
<table>
|
||||
<colgroup>
|
||||
<col width="50%" />
|
||||
<col width="50%" />
|
||||
</colgroup>
|
||||
<thead>
|
||||
<tr class="header">
|
||||
<th><p>Name</p></th>
|
||||
<th><p>Parameters</p></th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>Add-BitLockerKeyProtector</b></p></td>
|
||||
<td align="left"><p>-ADAccountOrGroup</p>
|
||||
<p>-ADAccountOrGroupProtector</p>
|
||||
<p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-Password</p>
|
||||
<p>-PasswordProtector</p>
|
||||
<p>-Pin</p>
|
||||
<p>-RecoveryKeyPath</p>
|
||||
<p>-RecoveryKeyProtector</p>
|
||||
<p>-RecoveryPassword</p>
|
||||
<p>-RecoveryPasswordProtector</p>
|
||||
<p>-Service</p>
|
||||
<p>-StartupKeyPath</p>
|
||||
<p>-StartupKeyProtector</p>
|
||||
<p>-TpmAndPinAndStartupKeyProtector</p>
|
||||
<p>-TpmAndPinProtector</p>
|
||||
<p>-TpmAndStartupKeyProtector</p>
|
||||
<p>-TpmProtector</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Backup-BitLockerKeyProtector</b></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-KeyProtectorId</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>Disable-BitLocker</b></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Disable-BitLockerAutoUnlock</b></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>Enable-BitLocker</b></p></td>
|
||||
<td align="left"><p>-AdAccountOrGroup</p>
|
||||
<p>-AdAccountOrGroupProtector</p>
|
||||
<p>-Confirm</p>
|
||||
<p>-EncryptionMethod</p>
|
||||
<p>-HardwareEncryption</p>
|
||||
<p>-Password</p>
|
||||
<p>-PasswordProtector</p>
|
||||
<p>-Pin</p>
|
||||
<p>-RecoveryKeyPath</p>
|
||||
<p>-RecoveryKeyProtector</p>
|
||||
<p>-RecoveryPassword</p>
|
||||
<p>-RecoveryPasswordProtector</p>
|
||||
<p>-Service</p>
|
||||
<p>-SkipHardwareTest</p>
|
||||
<p>-StartupKeyPath</p>
|
||||
<p>-StartupKeyProtector</p>
|
||||
<p>-TpmAndPinAndStartupKeyProtector</p>
|
||||
<p>-TpmAndPinProtector</p>
|
||||
<p>-TpmAndStartupKeyProtector</p>
|
||||
<p>-TpmProtector</p>
|
||||
<p>-UsedSpaceOnly</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Enable-BitLockerAutoUnlock</b></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>Get-BitLockerVolume</b></p></td>
|
||||
<td align="left"><p>-MountPoint</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Lock-BitLocker</b></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-ForceDismount</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>Remove-BitLockerKeyProtector</b></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-KeyProtectorId</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Resume-BitLocker</b></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>Suspend-BitLocker</b></p></td>
|
||||
<td align="left"><p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-RebootCount</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Unlock-BitLocker</b></p></td>
|
||||
<td align="left"><p>-AdAccountOrGroup</p>
|
||||
<p>-Confirm</p>
|
||||
<p>-MountPoint</p>
|
||||
<p>-Password</p>
|
||||
<p>-RecoveryKeyPath</p>
|
||||
<p>-RecoveryPassword</p>
|
||||
<p>-RecoveryPassword</p>
|
||||
<p>-WhatIf</p></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|Name|Parameters|
|
||||
|--- |--- |
|
||||
|**Add-BitLockerKeyProtector**|<li>ADAccountOrGroup<li>ADAccountOrGroupProtector<li>Confirm<li>MountPoint<li>Password<li>PasswordProtector<li>Pin<li>RecoveryKeyPath<li>RecoveryKeyProtector<li>RecoveryPassword<li>RecoveryPasswordProtector<li>Service<li>StartupKeyPath<li>StartupKeyProtector<li>TpmAndPinAndStartupKeyProtector<li>TpmAndPinProtector<li>TpmAndStartupKeyProtector<li>TpmProtector<li>WhatIf|
|
||||
|**Backup-BitLockerKeyProtector**|<li>Confirm<li>KeyProtectorId<li>MountPoint<li>WhatIf|
|
||||
|**Disable-BitLocker**|<li>Confirm<li>MountPoint<li>WhatIf|
|
||||
|**Disable-BitLockerAutoUnlock**|<li>Confirm<li>MountPoint<li>WhatIf|
|
||||
|**Enable-BitLocker**|<li>AdAccountOrGroup<li>AdAccountOrGroupProtector<li>Confirm<li>EncryptionMethod<li>HardwareEncryption<li>Password<li>PasswordProtector<li>Pin<li>RecoveryKeyPath<li>RecoveryKeyProtector<li>RecoveryPassword<li>RecoveryPasswordProtector<li>Service<li>SkipHardwareTest<li>StartupKeyPath<li>StartupKeyProtector<li>TpmAndPinAndStartupKeyProtector<li>TpmAndPinProtector<li>TpmAndStartupKeyProtector<li>TpmProtector<li>UsedSpaceOnly<li>WhatIf|
|
||||
|**Enable-BitLockerAutoUnlock**|<li>Confirm<li>MountPoint<li>WhatIf|
|
||||
|**Get-BitLockerVolume**|<li>MountPoint|
|
||||
|**Lock-BitLocker**|<li>Confirm<li>ForceDismount<li>MountPoint<li>WhatIf|
|
||||
|**Remove-BitLockerKeyProtector**|<li>Confirm<li>KeyProtectorId<li>MountPoint<li>WhatIf|
|
||||
|**Resume-BitLocker**|<li>Confirm<li>MountPoint<li>WhatIf|
|
||||
|**Suspend-BitLocker**|<li>Confirm<li>MountPoint<li>RebootCount<li>WhatIf|
|
||||
|**Unlock-BitLocker**|<li>AdAccountOrGroup<li>Confirm<li>MountPoint<li>Password<li>RecoveryKeyPath<li>RecoveryPassword<li>RecoveryPassword<li>WhatIf|
|
||||
|
||||
Similar to manage-bde, the Windows PowerShell cmdlets allow configuration beyond the options offered in the control panel. As with manage-bde, users need to consider the specific needs of the volume they are encrypting prior to running Windows PowerShell cmdlets.
|
||||
|
||||
|
||||
@ -160,110 +160,23 @@ Unlike CSV2.0 volumes, physical disk resources can only be accessed by one clust
|
||||
|
||||
The following table contains information about both Physical Disk Resources (that is, traditional failover cluster volumes) and Cluster Shared Volumes (CSV) and the actions that are allowed by BitLocker in each situation.
|
||||
|
||||
<table>
|
||||
<colgroup>
|
||||
<col width="20%" />
|
||||
<col width="20%" />
|
||||
<col width="20%" />
|
||||
<col width="20%" />
|
||||
<col width="20%" />
|
||||
</colgroup>
|
||||
<tbody>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Action</b></p></td>
|
||||
<td align="left"><p><b>On owner node of failover volume</b></p></td>
|
||||
<td align="left"><p><b>On Metadata Server (MDS) of CSV</b></p></td>
|
||||
<td align="left"><p><b>On (Data Server) DS of CSV</b></p></td>
|
||||
<td align="left"><p><b>Maintenance Mode</b></p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>Manage-bde –on</b></p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Manage-bde –off</b></p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>Manage-bde Pause/Resume</b></p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Blocked<b></p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Manage-bde –lock</b></p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>manage-bde –wipe</b></p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Unlock</b></p></td>
|
||||
<td align="left"><p>Automatic via cluster service</p></td>
|
||||
<td align="left"><p>Automatic via cluster service</p></td>
|
||||
<td align="left"><p>Automatic via cluster service</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>manage-bde –protector –add</b></p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>manage-bde -protector -delete</b></p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>manage-bde –autounlock</b></p></td>
|
||||
<td align="left"><p>Allowed (not recommended)</p></td>
|
||||
<td align="left"><p>Allowed (not recommended)</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed (not recommended)</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Manage-bde -upgrade</b></p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
<td align="left"><p><b>Shrink</b></p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
<tr class="odd">
|
||||
<td align="left"><p><b>Extend</b></p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
<td align="left"><p>Blocked</p></td>
|
||||
<td align="left"><p>Allowed</p></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
></b>Note:** Although the manage-bde -pause command is Blocked in clusters, the cluster service will automatically resume a paused encryption or decryption from the MDS node
|
||||
|**Action**|**On owner node of failover volume**|**On Metadata Server (MDS) of CSV**|**On (Data Server) DS of CSV**|**Maintenance Mode**|
|
||||
|--- |--- |--- |--- |--- |
|
||||
|**Manage-bde –on**|Blocked|Blocked|Blocked|Allowed|
|
||||
|**Manage-bde –off**|Blocked|Blocked|Blocked|Allowed|
|
||||
|**Manage-bde Pause/Resume**|Blocked|Blocked**|Blocked|Allowed|
|
||||
|**Manage-bde –lock**|Blocked|Blocked|Blocked|Allowed|
|
||||
|**manage-bde –wipe**|Blocked|Blocked|Blocked|Allowed|
|
||||
|**Unlock**|Automatic via cluster service|Automatic via cluster service|Automatic via cluster service|Allowed|
|
||||
|**manage-bde –protector –add**|Allowed|Allowed|Blocked|Allowed|
|
||||
|**manage-bde -protector -delete**|Allowed|Allowed|Blocked|Allowed|
|
||||
|**manage-bde –autounlock**|Allowed (not recommended)|Allowed (not recommended)|Blocked|Allowed (not recommended)|
|
||||
|**Manage-bde -upgrade**|Allowed|Allowed|Blocked|Allowed|
|
||||
|**Shrink**|Allowed|Allowed|Blocked|Allowed|
|
||||
|**Extend**|Allowed|Allowed|Blocked|Allowed|
|
||||
|
||||
>[!NOTE]
|
||||
> Although the manage-bde -pause command is Blocked in clusters, the cluster service will automatically resume a paused encryption or decryption from the MDS node
|
||||
|
||||
In the case where a physical disk resource experiences a failover event during conversion, the new owning node will detect the conversion is not complete and will complete the conversion process.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user