46 Posts
0
1107
September 20th, 2021 10:00
Advice please re Vostro 15 3568 and my confusion re Secure boot, Bitlocker and Acronis.
Hi,
After slow laptop complaints my daughter's Vostro15 3568 needs an SSD, 8Gb RAM and an update of Dell Windows 10 Home to Windows 10 Pro.
I plan to backup the existing whole drive using Acronis, retaining all partition info, user files, info before fitting a new SSD and restoring info and maybe partitions?.
However, although comfortable with a lot of 'old' Windows procedures I am totally new to MS BitLocker - even a changing of Secure Boot years ago holds a bad memory - and so don't want to mess up when carrying out changes.
Questions and Advice please
First part revolves around Acronis backing up everything - even before any cloning....
I assume my Acronis CD cannot read the OS partition because BitLocker won't let it.
If I temporarily turn off Device Encryption in Settings will that be enough to temporarily allow booting Acronis recovery to backup the whole disk including OS partition, plus allow me to simply turn it on afterwards by using Device Encryption in Settings) without any loss or problem?
I assume that after turning off Bitlocker without making any changes to Secure Boot I can boot to the Acronis CD by using F12 in order to backup everything.
Second part is about transferring data and sertting up on a new drive
After the backup is found to be readable on another PC, I plan to fit a 1Tb SSD, install W10 Pro 'clean', before transferring data back from the backup. I then plan to download the relevent Dell drivers.
- What I'm not sure about is whether any of the existing partitions should be on the new drive - e.g. bios, Dell utils etc So what would you advise please? Install clean, or leave all the partitions 'as is', or use Acronis cloning ??
- Is there a FAQ that people think is useful here especially relating to the changing of the Secure Boot settings?
- Any other thing that stands out that you guys would suggest?
Thanks in advance for any help.


jphughan
9 Legend
•
14K Posts
0
September 22nd, 2021 07:00
@old_Bean Disabling encryption doesn't create any problems around cloning or security on its own, apart from the fact that the data is of course no longer encrypted and therefore would be readable by others. But if re-enable encryption on the new drive afterward, then you'll be ok again. At that point the only considerations will be the old drive that will be left unencrypted and the contents of the Acronis image file itself.
I've definitely upgraded systems to SSDs and more memory in the past and it does make a substantial difference, so I think that's a reasonable plan, but if you don't specifically need features of Windows 10 Pro, then I would leave that particular upgrade out. It can always be done later, of course. A Home to Pro upgrade within the same version of Windows (i.e. Win10) is a quick and easy process.
Good luck!
DELL-Cares
Moderator
•
27.6K Posts
0
September 21st, 2021 04:00
We tried reaching you on a private message asking for the Service Tag number to ascertain the warranty but did not receive a response. Please feel free to reply to the private message whenever you are available.
jphughan
9 Legend
•
14K Posts
0
September 21st, 2021 07:00
@old_Bean Last thing I meant to ask but managed to forget while getting wrapped up in the imaging aspect of all this: You say this is motivated by complaints of a slow system. In that case, why are you upgrading to Windows 10 Pro? It won't run any faster than Windows 10 Home, so unless you specifically need features that are exclusive to Pro, I'd save your cash there.
jphughan
9 Legend
•
14K Posts
0
September 21st, 2021 07:00
@old_Bean Apologies, I just realized that I misread your post. I thought you were migrating to a new system. I now see that you're just swapping some hardware. In that case, you don't have to worry about the "transplant" concerns. But it would still be a waste of time to install Windows 10 clean onto the SSD before restoring the image onto it. What I would suggest instead would be this:
Another variation you can consider would be capturing the image backup from within Windows by having Acronis installed on that system. In that case, even with BitLocker still enabled, the image backup will work just like a regular backup because Acronis running within Windows will be able to see the disk in its unlocked form. That then means that when you restore it, the restored SSD will be unencrypted, so if you want to keep encryption, make sure you enable that afterward. If on the other hand you don't have a current version or available license of Acronis to install on this system and therefore have to use existing bootable media, then you can either disable encryption or figure out how to unlock a BitLocker partition inside the Acronis bootable environment. But if you're working with existing Acronis media rather than a current release, then you might have Secure Boot issues depending on which version of Windows PE your bootable media is using.
jphughan
9 Legend
•
14K Posts
0
September 21st, 2021 07:00
@old_Bean If you're not set on using Acronis, you might want to consider using Macrium Reflect Free, which has very robust support for BitLocker, including some unique capabilities such as being able to restore a partition image backup into an existing target partition that already has BitLocker while maintaining that target partition's existing encryption. But I'll address what I can here in general terms.
First, Secure Boot should not be a hurdle here, nor should you disable it. Secure Boot only makes sure that the bootloader you're booting from was signed by a trusted authority and has not been altered since that signature. Secure Boot has been supported since Windows 8, and therefore since its corresponding Windows PE 4.0, which uses the same kernel. Any Acronis bootable media created today would likely be using Windows PE 10 (Windows 10 kernel), which of course will also support Secure Boot. As long as you're not using the ancient Windows PE 3.1 (Windows 7 kernel), you should be fine getting your system to boot your Acronis media while Secure Boot is enabled.
In terms of capturing an image backup, if you boot into your Acronis media and capture it that way, then you'd be capturing the partition in its locked state. That is not particularly desirable because in a locked state, Acronis won't be able to differentiate between sectors that actually contain meaningful data vs. empty space, so it will have to back up every sector of the BitLockered partition. Depending on the capabilities of the Acronis bootable media, you could potentially unlock the BitLockered partition in that environment and THEN capture an image backup, in which case the backup would work just like a non-BitLockered partition. Macrium Reflect can do this, but I don't know about Acronis. Or if you're really worried about this, you could simply turn off BitLocker before you capture the backup and then turn it on later if you need to keep that system encrypted.
In terms of restoring to the new system, if you're capturing an image backup of your source system, there is absolutely no point installing Windows 10 on the new system before restoring your backup onto it, because an image restore is going to blow away anything you've set up on the target beforehand. It's entirely possible to restore an image backup onto a completely empty, uninitialized disk. (EDIT: This next segment no longer applies to this specific case of swapping hardware in an existing system rather than moving to a completely separate system.) There is no way to "merge" your old system's backup into your new system's existing setup such that your applications and data carry over, but your new system's Windows installation and drivers are left intact. If that comes as a surprise to you, then you may want to rethink your strategy here, because if you restore an image backup, you'll be restoring your old system's Windows installation and drivers to that new system. If the new system doesn't have a license for the same Windows version and edition (Home vs. Pro) that you restored from your old system, then the old system's Windows environment likely won't activate on the new system. And you'll need to install any drivers appropriate to the new system AFTER you perform this restore, since your old system's Windows environment won't have those. Lastly, depending on how the hardware compares, a Windows environment originally set up on one system might not boot at all when "transplanted" to a new system. Macrium Reflect has a utility called ReDeploy that is expressly designed to address this by making offline modifications to the restored Windows environment to get it to load the appropriate boot-critical drivers, including injecting drivers into the restored Windows environment if needed.
Hopefully this helps!
old_Bean
46 Posts
0
September 22nd, 2021 05:00
Thank you JPHughan,
I appreciate your thoughts and ideas, and your explanations around Secure Boot were very helpful and reassuring.
One quick question... does Disabling Encryption cause any issues to watch out for - e.g.can I simply turn it back on again afterwards without causing problems?
old_Bean
46 Posts
0
September 22nd, 2021 05:00
Thank you all for your help so far. I appreciate the info.
The Vostro is simply slow. I have run the diagnostics and no issues came to light. Therefore I am starting from the position that the hardware seems ok, and as a rough indicator of the hardware, Speccy indicates things like memory, temperature etc seem normal.
I have checked for the usual things like Malware, defragging and I'm currently taking time checking what loads after the boot.
I will be talking to my daughter this weekend with the intention of arranging a date to Reset or Reinstall Windows using the Dell procedure and see if that cures the issue.
old_Bean
46 Posts
0
September 22nd, 2021 05:00
Thank you. I have replied today. Sorry about delay in replying.