Hi there,
I am currently modifying my server backup setup. What I have done previously is to connect two external HDDs for rotating off-site storage. My next step is to encrypt both drives with bitlocker. Since I have opted for dedicating each whole disk for the server backup - which was advised because of performance advantages - they are not assigned a drive letter and don't show up neither in explorer nor in "manage bitlocker".
inputting manage-bde -status in the cmd prompt, I am presented with all the drives, there assigned drive letters or other identification.
The both drives dedicated for server backup are identified by a GUID stamp in the form of e.g. {cc566d14-44a0-11d9-9d93-806e6f6e6963}, so I tried to enable the encryption via cmd prompt, with the following combinations:
manage-bde -on {cc566d14-44a0-11d9-9d93-806e6f6e6963} ....
manage-bde -on \\?\volume\{cc566d14-44a0-11d9-9d93-806e6f6e6963}\ .... <-- as the syntax is for example when using wbadmin.exe
manage-bde -on "{cc566d14-44a0-11d9-9d93-806e6f6e6963}" ....
manage-bde -on '{cc566d14-44a0-11d9-9d93-806e6f6e6963}' ....
But I always get a syntax error. I realise that in the TechNet documentation for manage-bde there is no (official?) syntax for GUID identification of drives but what else am I supposed to do?
Sure I could assign a drive letter in diskmgmt.msc to the drives and "normally" enable bitlocker on the drives, but I am hesitating because I don't want to forfeit the performance advantages for dedicated drives. Also, encyprting before hand is no option since the drives are formatted when dedicating them to the backup.
Has someone a useful tip on how to go forward?
Cheers, jw