Skip to main content

Full Disk Encryption

GravityZone Full Disk Encryption allows you to operate BitLocker on Windows endpoints and FileVault and the diskutil command-line utility on macOS endpoints via Control Center.

To ensure data protection, this module provides full disk encryption for boot and non-boot volumes, on fixed disks, and it stores the recovery keys in case the users forget their passwords.

The Encryption module uses the existing hardware resources in your GravityZone environment.

From the software perspective, the requirements are almost the same as for BitLocker, FileVault and the diskutil command-line utility and most of the limitations refer to these tools.

On Windows

GravityZone Encryption supports BitLocker, starting with version 1.2, on machines with and without a Trusted Platform Module (TPM) chip.

GravityZone supports BitLocker on the endpoints with the following operating systems:

  • Windows 11 Pro

  • Windows 11 Pro for Workstations

  • Windows 11 Enterprise

  • Windows 11 Education

  • Windows 10 Education

  • Windows 10 Enterprise

  • Windows 10 Pro

  • Windows 8.1 Enterprise

  • Windows 8.1 Pro

  • Windows 8 Enterprise

  • Windows 8 Pro

  • Windows 7 Ultimate (with TPM)

  • Windows 7 Enterprise (with TPM)

  • Windows Server 2022*

  • Windows Server 2019*

  • Windows Server 2016*

  • Windows Server 2012 R2*

  • Windows Server 2012*

  • Windows Server 2008 R2* (with TPM)

*BitLocker is not included on these operating systems and must be installed separately. For more information about deploying BitLocker on Windows Server, refer to these KB articles provided by Microsoft:


GravityZone only supports encryption on Windows 7 and Windows 2008 R2 with TPM.

For detailed BitLocker requirements, refer to this KB article provided by Microsoft:

On macOS

GravityZone supports FileVault and diskutil on macOS endpoints running the following operating systems:

  • macOS Sonoma (14.x)

  • macOS Ventura (13.x)

  • macOS Monterey (12.x)

  • macOS Big Sur (11.x)