From 7a4578c7f9d35ebcedd2f956ad665f05a902bb46 Mon Sep 17 00:00:00 2001 From: BogdanEmilian Date: Mon, 19 Oct 2026 17:32:13 +0300 Subject: [PATCH] Add BitLocker prerequisites to the recommended migration procedure Moving the BitLocker feature installation note as a prerequisite before the actual migration step, letting the user know what to expect if any errors on missing packages pop up during OSMorphing --- ...ating-windows-vms-encrypted-with-bitlocker.md | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/source/features/migrating-windows-vms-encrypted-with-bitlocker.md b/source/features/migrating-windows-vms-encrypted-with-bitlocker.md index bb46395..790b8db 100644 --- a/source/features/migrating-windows-vms-encrypted-with-bitlocker.md +++ b/source/features/migrating-windows-vms-encrypted-with-bitlocker.md @@ -17,6 +17,16 @@ If the TPM isn’t available (e.g. due to hardware changes or if the disks have ## Recommended migration procedure +### Prerequisites + +The Windows minion image, which Coriolis uses for the temporary worker VM that performs OS morphing, must have the BitLocker feature installed. Without it, the worker can't unlock the volume and OS morphing fails with a missing packages error. + +```powershell +Install-WindowsFeature BitLocker +``` + +### Migration steps + A preconfigured BitLocker recovery password must be specified when initiating the Coriolis transfer. Coriolis will use it to unlock the OS drive during OS morphing, which is performed by a temporary worker VM on the destination cloud. The following sample calls the WMI API through PowerShell to configure a BitLocker recovery password for the OS drive. Its output is easier to parse than that of the **manage-bde** command and more convenient to use as part of automated scripts. Follow these steps on the Windows instance that is about to be migrated. @@ -52,12 +62,6 @@ When initiating the migration, specify the recovery password like so: In order for the final VM to be able to launch, Coriolis suspends BitLocker during OS morphing. The final VM reconfigures the TPM protector and resumes BitLocker when booted for the first time, which occurs immediately after the OS morphing process. -**Important:** make sure that your Windows minion image has the BitLocker feature installed, otherwise it will not be able to unlock the volume. - -```powershell -Install-WindowsFeature BitLocker -``` - Feel free to remove the temporary key protector from the source and destination instances after completing the migration. ## Alternative Migration Methods