How to bypass BitLocker check for Iron Key flash drives

Question

I have configured a Group Policy to force removable drive encryption via BitLocker. This works perfectly until someone uses and Iron Key encrypted drive. Then Bitlocker tries to Bitlock the already encrypted Iron Key drive. Ideally, we would like to force users to either Bitlock removable drives or use Iron Keys which have their own drive encryption. Is there a way to do this? Is there a way to bypass the Bitlocker check for Iron Keys when they are plugged into the PCs?

Answer 1

You may either exclude or include Iron Key encrypted drive.

Insert Iron Drive.

Now open Device Manager.

Locate Iron Drive > Right-click it and select Properties > Details tab > Hardware Ids

Note down the VID and PID.

Open Group Policy.

Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Removable Data Drives

Double-click Deny write access to removable drives not protected by BitLocker. > Enable it.

Click Show next to Configure allowed devices.

USB\VID_xxxx&PID_xxxx

Ok/Apply.

Open Command Prompt as Admin and run:

gpupdate /force