part II

this page is under construction

notes

resources

• How to enable Bitlocker HW encryption with modern SSDs on system drive (e.g. Samsung 980 Pro)
• Samsung SSD 970 EVO Plus drive encryption won't change from Ready to Enable

---

configuring prior windows installation

• Startup old system
• System will run Windows
  • Create Windows 11 Installation Media Tool USB
  • Create Samsung Secure Erase USB
  • Create USB with LAN driver
• Shutdown system

configuring windows installation

• Plug in all three USB
• Startup system
  • Press del key repeatedly to enter UEFI BIOS

configuring bios

• Click Advanced Mode
  • Click Advanced
    • Click Trusted Computing
      • Set Disabled Block Sid to Enabled
  • Click Boot
    • Click CSM (Compatibility Support Module)
      • Set Launch CSM to Enabled
    • Click Secure Boot
      • Set OS Type to Other OS
      • Set Secure Boot Mode to Custom
    • Under the Boot Option Priorities heading, set Boot Option #1 to the Samsung Secure Erase USB
  • Click Exit
    • Click Save Changes & Reset
      • Under the heading Save configuration and reset?, click Ok

configuring windows installation

• System will restart
• System will display prompt
  • Press F10
• System will restart
• System will run Samsung Secure Erase USB
  • Wipe boot drive
  • Wipe any fixed drives
• System will restart
  • Press del key repeatedly to enter UEFI BIOS

configuring bios

• Click Advanced Mode
  • Click Advanced
    • Click Trusted Computing
      • Set Disabled Block Sid to Enabled
  • Click Boot
    • Click CSM (Compatibility Support Module)
      • Set Launch CSM to Disabled
    • Click Secure Boot
      • Set OS Type to Windows UEFI
      • Set Secure Boot Mode to Enabled
    • Under the Boot Option Priorities heading, set Boot Option #1 to the Windows 11 Installation Media Tool USB
  • Click Exit
    • Click Save Changes & Reset
      • Under the heading Save configuration and reset?, click Ok

configuring windows installation

• System will run Windows 11 Installation Media Tool USB
  • Proceed with Windows 11 installer
  • Windows 11 installer will display prompt for network information
    • Press Shft + F10
    • Windows 11 installer will run command prompt
      • Enter oobe\bypassnro
• System will restart
• System will run Windows 11 installer
  • Proceed with Windows 11 installer
• System may restart multiple times
• System will run Windows 11
  • Win+R powershell Ctrl+Shft+Ent
  • winget install -eh --id Samsung.SamsungMagician
  • Open Samsung Magician
    • Check whether boot drive and any fixed drives have hardware encryption enabled