I have a laptop running Windows 7 Ultimate. I have encrypted my drives using BitLocker. Now I have also installed Linux along with Windows. But my encrypted drives are not visible in Linux. How can I access Bitlocker encrypted drive in Linux?
Linux doesn't have the ability to access Bitlocker encrypted drive, but there is a the 3rd-party tool: Dislocker which can access Bitlocker encrypted drive in Linux/Ubuntu. Dislocker is a free utility which can mount BitLocker encrypted volume in Linux. Here is a quick guide how to use it:
Once downloaded extract the file: root@kali:~# tar -xvf dislocker.tar.gz, we have the options for comiling: w/ or w/o FUSE. Basically if we use FUSE , we will be able to mount it, and browse it, if not, then the only way to check the contents is to decrypt the full drive, which is not that efficient. So let's go for FUSE here. Edit the Makefile, and set __RUN_FUSE to 1 and __RUN_FILE to 0:
# Choose between one of them (done automatically by using `make fuse' or `make file')
__RUN_FUSE = 1
Then compile the app:
gcc -Wall -Werror -Wextra -Wconversion -DPROGNAME=\"dislocker\" -DVERSION=\"0.3\" -D_FILE_OFFSET_BITS=64 -I/usr/include -I. -L/usr/lib64 -D__ARCH_X86_64 -D__RUN_FUSE -DFUSE_USE_VERSION=26 -c -o outputs/fuse/fuse.o outputs/fuse/fuse.c
In file included from ./dislocker.h:28:0,
./outputs/fuse/fuse.h:32:19: fatal error: fuse.h: No such file or directory
make: *** [outputs/fuse/fuse.o] Error 1
If you get the error above you will need the FUSE header files, to install those run:
apt-get install libfuse-dev
and then compile dislocker, it should be good now.
root@kali:~/dislocker/src# make install
Once it's installed, you can use the recovery key to decrypt Bitlocker encrypted drive. The steps are to read the volume, and then mount it with fuse. When we first read in the volume (decrypt) we will get a single file, called "dislocker-file", which can be mounted later.
Example to access Bitlocker encrypted drive in Linux with dislocker
Step 1: Copy the BitLocker encrypted volume.
% dd if=/dev/sda2 of = encrypted.bitlocker
This will copy the entire volume located into /dev/sda2 to encrypted.bitlocker
Step 2: Unlock Bitlocker encrypted drive.
% dislocker-file -V encrypted.bitlocker -p563200-557084-108284-218900-019151-415437-694144-239976 -- decrypted.ntfs
This will decrypt Bitlocker encrypted drive into decrypted.ntfs using the recovery key.
% dislocker-fuse -V encrypted.bitlocker -f /path/to/usb/file.BEK -- /mnt/ntfs
This will create a file into /mnt/ntfs named dislocker-file if the encrypted volume has a clear key enabled.
Step 3: Mount Bitlocker encrypted drive once it is decrypted.
% mount -o loop ntfs/dislocker-file /mnt
Then mount it on a file into /Volumes for instance:
% mkdir /Volumes/blah && mount -t ntfs /dev/disk1 /Volumes/blah
Bitlocker for Mac - M3 Bitlocker Loader for Mac
Although Microsoft only developed and released Bitlocker for Windows version, so Mac OSX cannot open Bitlocker encrypted drive, but with the help of M3 Bitlocker Loader for Mac, you can easily open Bitlocker encrypted drive and then read/write Bitlocker encrypted drive in macOS 10.13 (High Sierra)/10.12 (Sierra) and Mac OSX 10.11/10.10/10.9/10.8/10.7 Operating Systems.