\u015eimdi BitLocker kilidini a\u00e7man\u0131n, olas\u0131 \u00e7\u00f6kmeleri \u00f6nlemenin ve verilere ve g\u00f6rev ayr\u0131nt\u0131lar\u0131na eri\u015fmenin yollar\u0131na daha yak\u0131ndan bakal\u0131m.<\/p>\n\n\n\n
S\u00fcr\u00fcc\u00fcm neden kilitlenebilir? <\/h2>\n\n\n\n![\"\"](\"https:\/\/www.indir.com\/haber\/wp-content\/uploads\/2022\/06\/bitlocker-sifresi-kurtarma.webp\" "\\"\\"")
<\/figure>\n\n\n\nYukar\u0131dakine benzer bir ekran kar\u015f\u0131n\u0131za \u00e7\u0131k\u0131yorsa, BitLocker \u015fifrelemesi nedeniyle sisteme eri\u015fiminiz k\u0131s\u0131tlanm\u0131\u015ft\u0131r.
Bu kilit, genellikle bilgisayar TPM’deyken ve a\u015fa\u011f\u0131daki olaylardan biri meydana geldi\u011finde olu\u015fur:<\/p>\n\n\n\n
- Bilgisayar\u0131 \u00e7\u0131kard\u0131ktan sonra diski ba\u015fka bir cihazda okumaya \u00e7al\u0131\u015f\u0131rsan\u0131z.<\/li>
- Bilgisayar\u0131n\u0131zda veya grafik kart\u0131n\u0131zda, parmak izi okuyucunuzda vb. UEFI BIOS’u g\u00fcncellediyseniz, a\u015fa\u011f\u0131daki gibi belirli bir bile\u015fenle bir \u00fcr\u00fcn yaz\u0131l\u0131m\u0131 g\u00fcncellemesi olu\u015fturduysan\u0131z,<\/li>
- Bilgisayar\u0131n\u0131z\u0131n UEFI BIOS’unda g\u00fcvenlikle ilgili \u00f6nemli ayarlarda de\u011fi\u015fiklikler yapt\u0131n\u0131z. Root of Trust (RoT-G\u00fcven K\u00f6k\u00fc) de\u011fi\u015firse (\u00f6rne\u011fin, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taraf\u0131ndan). RoT, kriptografik sistem i\u00e7inde her zaman g\u00fcvenilir bir kaynak olmu\u015ftur. Kriptografik g\u00fcvenlik, veri \u015fifreleme ve \u015fifre \u00e7\u00f6zme, dijital imza olu\u015fturma ve imza do\u011frulama gibi i\u015flevleri ger\u00e7ekle\u015ftirmek i\u00e7in anahtarlara dayand\u0131\u011f\u0131ndan, RoT \u015femalar\u0131 genellikle bir sabit donan\u0131m mod\u00fcl\u00fc i\u00e7erir.<\/li><\/ul>\n\n\n\n
Kilitli bir durumda ne yapmal\u0131?<\/h2>\n\n\n\n
Windows’unuzda umutsuz bir durumdaysan\u0131z ve bir BitLocker kurtarma anahtar\u0131 istenirse, bu, kurtarma anahtar\u0131n\u0131n s\u00fcr\u00fcc\u00fcn\u00fcn kilidini a\u00e7man\u0131n tek yolu olabilece\u011fi anlam\u0131na gelir. Bu durumda, sizden istenenleri dikkatlice okuyun. Windows 10 1903 ve sonraki s\u00fcr\u00fcmleri (Windows 11’in t\u00fcm s\u00fcr\u00fcmleri gibi) genellikle BitLocker anahtar yedeklemesinin ne zaman olu\u015fturuldu\u011fu ve nereye kaydedildi\u011fi hakk\u0131nda bilgi i\u00e7erir.<\/p>\n\n\n\n
Baz\u0131 durumlarda, diskin kilidini a\u00e7man\u0131n PIN veya parola gibi ba\u015fka yollar\u0131 olabilir. Durumun b\u00f6yle olup olmad\u0131\u011f\u0131n\u0131, bilgisayar\u0131n\u0131z\u0131 Elcomsoft System Recovery ile ba\u015flat\u0131p BitLocker korumal\u0131 diski kontrol ederek kontrol edebilirsiniz. Parola yoksa, Elcomsoft System Recovery a\u015fa\u011f\u0131daki gibi bir ekran kar\u015f\u0131n\u0131za \u00e7\u0131kar:<\/p>\n\n\n\n![\"\"](\"https:\/\/www.indir.com\/haber\/wp-content\/uploads\/2022\/06\/bitlocker-sifresi-kurtarma.jpg\" "\\"\\"")
<\/figure>\n\n\n\nB\u00f6yle bir ekran kar\u015f\u0131n\u0131za \u00e7\u0131k\u0131yorsa, \u015fifreli diskin kilidini a\u00e7man\u0131n tek yolu bir BitLocker kurtarma anahtar\u0131d\u0131r. Bu nedenle \u015fifrenizi mutlaka kay\u0131t alt\u0131na alman\u0131z gerekmektedir. <\/p>\n\n\n\n
Kurtarma anahtar\u0131n\u0131 olu\u015fturmak i\u00e7in;<\/h2>\n\n\n\n
Windows Denetim Masas\u0131nda giri\u015f yaparak \u201cBitLocker S\u00fcr\u00fcc\u00fc \u015eifrelemesi (BitLocker Drive Encryption)\u201d uygulamas\u0131n\u0131 ba\u015flat\u0131n. Bunun i\u00e7in Windows arama k\u0131sm\u0131na \u201cbitlocker\u201d yazarak\u201cBitLocker\u2019\u0131 y\u00f6net\u201d se\u00e7ene\u011fine de t\u0131klayabilirsiniz. BitLocker kurtarma anahtar\u0131n\u0131z\u0131 kaydetmek i\u00e7in \u201cKurtarma anahtar\u0131n\u0131z\u0131 yedekleyin se\u00e7ene\u011fine t\u0131klay\u0131n. <\/p>\n\n\n\n
NOT: Bunun i\u00e7in Windows hesab\u0131n\u0131z\u0131n y\u00f6netici ayr\u0131cal\u0131klar\u0131na sahip olmas\u0131 gerekiyor.<\/p>\n\n\n\n
Kurtarma anahtar\u0131n\u0131 Microsoft hesab\u0131n\u0131za (Windows\u2019ta oturum a\u00e7arken kulland\u0131ysan\u0131z) ya da dosya olarak (tercihen bir USB s\u00fcr\u00fcc\u00fcye) kaydedebilir ya da bir not ka\u011f\u0131d\u0131na yazabilirsiniz. <\/p>\n\n\n\n
Alternetif komut<\/h2>\n\n\n\n
E\u011fer bu y\u00f6ntemi deneyip sonu\u00e7 alamad\u0131ysan\u0131z komut sat\u0131r\u0131n\u0131 kullanarak kurtarma anahtar\u0131n\u0131 olu\u015fturabilirsiniz. Bunun i\u00e7in Arama b\u00f6l\u00fcm\u00fcne \u201cKomut \u0130stemi\u201d yaz\u0131n ve sa\u011f t\u0131klay\u0131n. Ard\u0131ndan \u201cY\u00f6netici olarak \u00e7al\u0131\u015ft\u0131r\u201d se\u00e7ene\u011fini se\u00e7erek a\u015fa\u011f\u0131daki komutu yaz\u0131n:<\/p>\n\n\n\n
manage-bde -protectors -get C:<\/pre>\n\n\n\nArd\u0131ndan kar\u015f\u0131n\u0131za \u015f\u00f6yle bir ekran \u00e7\u0131kacak:<\/p>\n\n\n\n
C:\\WINDOWS\\system32>manage-bde -protectors -get C:\nBitLocker Drive Encryption: Configuration Tool version 10.0.19041\nCopyright (C) 2013 Microsoft Corporation. All rights reserved.\n\nVolume C: [NVME]\n\nAll Key Protectors\n\nTPM:\nID: {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}\nPCR Validation Profile:\n0, 2, 4, 11\n\nNumerical Password:\nID: {YYYY-YYYY-YYYY-YYYY-YYYYYYYYYYYY}\nPassword:\n123456-123456-123456-123456<\/pre>\n\n\n\nKar\u015f\u0131n\u0131za \u00e7\u0131kan \u201cNumerical Password (Say\u0131sal \u015eifre)\u201d alan\u0131 gerekli kurtarma anahtar\u0131n\u0131 g\u00f6sterecektir. <\/p>\n\n\n\n
<\/figure>\n\n\n\nYukar\u0131dakine benzer bir ekran kar\u015f\u0131n\u0131za \u00e7\u0131k\u0131yorsa, BitLocker \u015fifrelemesi nedeniyle sisteme eri\u015fiminiz k\u0131s\u0131tlanm\u0131\u015ft\u0131r.
Bu kilit, genellikle bilgisayar TPM’deyken ve a\u015fa\u011f\u0131daki olaylardan biri meydana geldi\u011finde olu\u015fur:<\/p>\n\n\n\n
- Bilgisayar\u0131 \u00e7\u0131kard\u0131ktan sonra diski ba\u015fka bir cihazda okumaya \u00e7al\u0131\u015f\u0131rsan\u0131z.<\/li>
- Bilgisayar\u0131n\u0131zda veya grafik kart\u0131n\u0131zda, parmak izi okuyucunuzda vb. UEFI BIOS’u g\u00fcncellediyseniz, a\u015fa\u011f\u0131daki gibi belirli bir bile\u015fenle bir \u00fcr\u00fcn yaz\u0131l\u0131m\u0131 g\u00fcncellemesi olu\u015fturduysan\u0131z,<\/li>
- Bilgisayar\u0131n\u0131z\u0131n UEFI BIOS’unda g\u00fcvenlikle ilgili \u00f6nemli ayarlarda de\u011fi\u015fiklikler yapt\u0131n\u0131z. Root of Trust (RoT-G\u00fcven K\u00f6k\u00fc) de\u011fi\u015firse (\u00f6rne\u011fin, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taraf\u0131ndan). RoT, kriptografik sistem i\u00e7inde her zaman g\u00fcvenilir bir kaynak olmu\u015ftur. Kriptografik g\u00fcvenlik, veri \u015fifreleme ve \u015fifre \u00e7\u00f6zme, dijital imza olu\u015fturma ve imza do\u011frulama gibi i\u015flevleri ger\u00e7ekle\u015ftirmek i\u00e7in anahtarlara dayand\u0131\u011f\u0131ndan, RoT \u015femalar\u0131 genellikle bir sabit donan\u0131m mod\u00fcl\u00fc i\u00e7erir.<\/li><\/ul>\n\n\n\n
Kilitli bir durumda ne yapmal\u0131?<\/h2>\n\n\n\n
Windows’unuzda umutsuz bir durumdaysan\u0131z ve bir BitLocker kurtarma anahtar\u0131 istenirse, bu, kurtarma anahtar\u0131n\u0131n s\u00fcr\u00fcc\u00fcn\u00fcn kilidini a\u00e7man\u0131n tek yolu olabilece\u011fi anlam\u0131na gelir. Bu durumda, sizden istenenleri dikkatlice okuyun. Windows 10 1903 ve sonraki s\u00fcr\u00fcmleri (Windows 11’in t\u00fcm s\u00fcr\u00fcmleri gibi) genellikle BitLocker anahtar yedeklemesinin ne zaman olu\u015fturuldu\u011fu ve nereye kaydedildi\u011fi hakk\u0131nda bilgi i\u00e7erir.<\/p>\n\n\n\n
Baz\u0131 durumlarda, diskin kilidini a\u00e7man\u0131n PIN veya parola gibi ba\u015fka yollar\u0131 olabilir. Durumun b\u00f6yle olup olmad\u0131\u011f\u0131n\u0131, bilgisayar\u0131n\u0131z\u0131 Elcomsoft System Recovery ile ba\u015flat\u0131p BitLocker korumal\u0131 diski kontrol ederek kontrol edebilirsiniz. Parola yoksa, Elcomsoft System Recovery a\u015fa\u011f\u0131daki gibi bir ekran kar\u015f\u0131n\u0131za \u00e7\u0131kar:<\/p>\n\n\n\n
<\/figure>\n\n\n\nB\u00f6yle bir ekran kar\u015f\u0131n\u0131za \u00e7\u0131k\u0131yorsa, \u015fifreli diskin kilidini a\u00e7man\u0131n tek yolu bir BitLocker kurtarma anahtar\u0131d\u0131r. Bu nedenle \u015fifrenizi mutlaka kay\u0131t alt\u0131na alman\u0131z gerekmektedir. <\/p>\n\n\n\n
Kurtarma anahtar\u0131n\u0131 olu\u015fturmak i\u00e7in;<\/h2>\n\n\n\n
Windows Denetim Masas\u0131nda giri\u015f yaparak \u201cBitLocker S\u00fcr\u00fcc\u00fc \u015eifrelemesi (BitLocker Drive Encryption)\u201d uygulamas\u0131n\u0131 ba\u015flat\u0131n. Bunun i\u00e7in Windows arama k\u0131sm\u0131na \u201cbitlocker\u201d yazarak\u201cBitLocker\u2019\u0131 y\u00f6net\u201d se\u00e7ene\u011fine de t\u0131klayabilirsiniz. BitLocker kurtarma anahtar\u0131n\u0131z\u0131 kaydetmek i\u00e7in \u201cKurtarma anahtar\u0131n\u0131z\u0131 yedekleyin se\u00e7ene\u011fine t\u0131klay\u0131n. <\/p>\n\n\n\n
NOT: Bunun i\u00e7in Windows hesab\u0131n\u0131z\u0131n y\u00f6netici ayr\u0131cal\u0131klar\u0131na sahip olmas\u0131 gerekiyor.<\/p>\n\n\n\n
Kurtarma anahtar\u0131n\u0131 Microsoft hesab\u0131n\u0131za (Windows\u2019ta oturum a\u00e7arken kulland\u0131ysan\u0131z) ya da dosya olarak (tercihen bir USB s\u00fcr\u00fcc\u00fcye) kaydedebilir ya da bir not ka\u011f\u0131d\u0131na yazabilirsiniz. <\/p>\n\n\n\n
Alternetif komut<\/h2>\n\n\n\n
E\u011fer bu y\u00f6ntemi deneyip sonu\u00e7 alamad\u0131ysan\u0131z komut sat\u0131r\u0131n\u0131 kullanarak kurtarma anahtar\u0131n\u0131 olu\u015fturabilirsiniz. Bunun i\u00e7in Arama b\u00f6l\u00fcm\u00fcne \u201cKomut \u0130stemi\u201d yaz\u0131n ve sa\u011f t\u0131klay\u0131n. Ard\u0131ndan \u201cY\u00f6netici olarak \u00e7al\u0131\u015ft\u0131r\u201d se\u00e7ene\u011fini se\u00e7erek a\u015fa\u011f\u0131daki komutu yaz\u0131n:<\/p>\n\n\n\n
manage-bde -protectors -get C:<\/pre>\n\n\n\n
Ard\u0131ndan kar\u015f\u0131n\u0131za \u015f\u00f6yle bir ekran \u00e7\u0131kacak:<\/p>\n\n\n\n
C:\\WINDOWS\\system32>manage-bde -protectors -get C:\nBitLocker Drive Encryption: Configuration Tool version 10.0.19041\nCopyright (C) 2013 Microsoft Corporation. All rights reserved.\n\nVolume C: [NVME]\n\nAll Key Protectors\n\nTPM:\nID: {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}\nPCR Validation Profile:\n0, 2, 4, 11\n\nNumerical Password:\nID: {YYYY-YYYY-YYYY-YYYY-YYYYYYYYYYYY}\nPassword:\n123456-123456-123456-123456<\/pre>\n\n\n\nKar\u015f\u0131n\u0131za \u00e7\u0131kan \u201cNumerical Password (Say\u0131sal \u015eifre)\u201d alan\u0131 gerekli kurtarma anahtar\u0131n\u0131 g\u00f6sterecektir. <\/p>\n\n\n\n