BitLocker identifies virtual data drives as Removable Storage

Products

• VMware vSphere ESXi

Issue/Introduction

*   Windows Guest OS identifies virtual data disks as "Removable Storage" within BitLocker Drive Encryption management.
*   Drives are listed under "Removable Data Drives - BitLocker To Go" instead of "Fixed Data Drives."
*   A "Safely Remove Hardware and Eject Media" icon appears in the Windows system tray for internal virtual disks.
*   The issue may persist even after changing the storage controller type (e.g., from LSI Logic SAS to VMware Paravirtual).

 

Environment

VMware vSphere ESXi 6.x, 7.x, 8.x

Cause

By default, VMware vSphere enables the HotAdd/HotPlug capability for virtual devices. This allows hardware to be added or removed while the VM is powered on. Windows interprets these hot-pluggable SCSI or SAS devices as removable media. BitLocker, in turn, classifies any drive reported by the OS as removable under the "BitLocker To Go" category.

 

Resolution

To resolve this, disable the HotPlug capability at the virtual machine level. This forces the Guest OS to recognize the devices as fixed internal storage.

1.  Power off the virtual machine.
2.  Right-click the VM in the vSphere Client and select Edit Settings.
3.  Click the VM Options tab.
4.  Expand the Advanced section and click Edit Configuration.
5.  Click **Add Configuration Params (or **Add Row**).
6.  Enter the following parameter:
    Name: `devices.hotplug`
    Value: `false`
7.  Click OK to save the configuration.
8.  Power on the virtual machine.

 

Additional Information

Open BitLocker Management (`control bde-on`) within the Guest OS.
Confirm the drive is now listed under Fixed Data Drives.
Verify the "Safely Remove Hardware" icon no longer includes the internal data drives.