EnableKeyProtectors method of the Win32_EncryptableVolume class

The EnableKeyProtectors method of the Win32_EncryptableVolume class enables or resumes all disabled or suspended key protectors. You can use this method to reenable or resume BitLocker protection on an encrypted volume. This method ensures that the volume's encryption key is not exposed in the clear on the hard disk.

Note

If the disc supports hardware encryption, the band state transitions to "unlocked" from "always unlocked".

 

Syntax

uint32 EnableKeyProtectors();

Parameters

This method has no parameters.

Return value

Type: uint32

This method returns one of the following codes or another error code if it fails.

If key protectors are already enabled and no other errors occur, this method returns zero.

Return code/value Description
S_OK
0 (0x0)
The method was successful.
FVE_E_SECURE_KEY_REQUIRED
2150694919 (0x80310007)
No key protectors exist on the volume. Use one of the following methods to specify key protectors for the volume:
FVE_E_NOT_ACTIVATED
2150694920 (0x80310008)
BitLocker is not enabled on the volume. Add a key protector to enable BitLocker.

 

Remarks

If the volume is fully encrypted, successfully running this method ensures that the volume is protected. If the volume is partially encrypted, successfully running this method implies that the volume will be protected when it becomes fully encrypted. For more information, see the GetProtectionStatus method.

If TPM-based key protectors exist for the volume, successfully running this method also refreshes these protectors so that the TPM validates against the current startup services on the platform. In other words, you are asserting that the current computer state is the correct state that the TPM will check against on future computer restarts.

Managed Object Format (MOF) files contain the definitions for Windows Management Instrumentation (WMI) classes. MOF files are not installed as part of the Windows SDK. They are installed on the server when you add the associated role by using the Server Manager. For more information about MOF files, see Managed Object Format (MOF).

Requirements

Requirement Value
Minimum supported client
Windows Vista Enterprise, Windows Vista Ultimate [desktop apps only]
Minimum supported server
Windows Server 2008 [desktop apps only]
Namespace
Root\CIMV2\Security\MicrosoftVolumeEncryption
MOF
Win32_encryptablevolume.mof

See also

Win32_EncryptableVolume

DisableKeyProtectors

ProtectKeyWithCertificateFile

ProtectKeyWithCertificateThumbprint

ProtectKeyWithExternalKey

ProtectKeyWithNumericalPassword

ProtectKeyWithPassphrase

ProtectKeyWithTPM

ProtectKeyWithTPMAndPIN

ProtectKeyWithTPMAndPINAndStartupKey

ProtectKeyWithTPMAndStartupKey