Yubico Forum

Hi!

I am trying to set up disk encryption in Windows 10 Pro using BitLocker and self-signed x509 certificate.
To achieve that I was following this tutorial: http://www.securearchitectures.com/2015 ... rd-to.html . I had set SelfSignedCertificates to 1 in registry and allowed running BitLocker without tpm. I also shared certificate as instructed in https://technet.microsoft.com/en-us/lib ... 30(v=ws.10).aspx .

Unfortunately when I try to enable encryption I am not offered SmartCard option -- only password and usb keyfile.

Can anyone tell me what I am missing?

Best regards,
grunai.

Hi,

I've used the same tutorial. You may have not noticed but there is a typo in this line:



The default days should be 365000 not 36500.

If it still not fixes it, share your openssl.cnf file, in case you've modified it.

Regards,

Bekir

Thank you for your response.

I had to use smaller value for availability period because of 2038 year bug in openssl.
Here is my openssl.cnf file: http://pastebin.com/2WiCEuBD

I appreciate your help.

Best regards,
grunai.