Changing the Drive Letter for a Windows Disk

Data Disks

At any time, you can use the Windows Disk Manager to change the drive letter for a data disk, even if that data disk is encrypted. The KeyControl Vault for VM Encryption automatically detects the change and displays the updated drive letter in the KeyControl Vault for VM Encryption webGUI after the next VM heartbeat.

If you want to force an immediate update, enter the hcl heartbeat command.

Boot Disk

If you have encrypted the boot disk, or if you plan to encrypt the boot disk in the future, Entrust DataControl requires that the boot disk must reside on C: or be mapped to C:.

If you are never going to encrypt the boot disk, you can use the Windows Disk Manager to change the drive letter as desired.

Entrust Bootloader Install Disk

If you want to change the drive letter for the disk on which the Entrust Bootloader is installed, you can use the Entrust Drive and Network Configuration utility or a PowerShell script.

To use the Entrust Drive and Network Configuration utility, run htblconf.exe and select the drive letter you want to use from the Select drive letter drop down. When you are finished, click Install.

To use the PowerShell script:

  1. Log into the Windows VM as a System Administrator.
  2. Start Windows PowerShell.

  3. Enter the command ChangeHTBootloadDrive.ps1 -drive new-drive:, where new-drive is the drive letter that you want to use. For example:

    PS C:\Users\Administrator> ChangeBootLoadDrive.ps1 -drive s:
HyTrust Bootloader is installed at E:, switching it to S:
Success