Encryption Management for Microsoft BitLocker manages BitLocker Drive Encryption™ (BDE) for endpoints running Microsoft Windows 7 Ultimate and Enterprise editions and Windows 8 Pro and Enterprise editions. Encryption Management for Microsoft BitLocker is designed to protect data by providing encryption for entire volumes. By default, BDE uses the AES encryption algorithm in CBC mode with a 128-bit or 256-bit key.