Encr yption automatically r uns the required Microsoft command line tool (BdeHdCfg.e xe) to prepare. the drive.This means that a separate BitLocker partition is created on the system drive. During setup of Sophos Central Device Encryption, a message informs the user that a restart is. required to prepare the system drive.The user can choose to restart the computer immediately. or postpone the operation. Device Encryption can only start when the computer is restarted and.