Bitlocker keeps automatically suspending

Question

_{Thursday, September 22, 2016 7:05 PM}

I have an issue with BitLocker where it keeps automatically suspending on the OS drive. When I press resume protection it works fine for a few hours or so, then it will eventually automatically go back to suspended. Not sure why its doing this please if anyone knows what could cause this or has had this issue, point me in the right direction. I greatly appreciate any help.

Information:
Windows 10 64bit
BIOS Enabled
TPM Enabled

so far i discovered the issue is somehow related to McAfee MNE management of native encryptio. it work fine with no issue when I remove it from the machine.

All replies (9)

_{Friday, September 23, 2016 11:57 AM}

Hi Thomas.

Please have a look at the bitlocker section in the eventlog and share the info.

->eventvwr->Application and services Logs->Microsoft->Windows->Bitlocker-API

_{Monday, September 26, 2016 10:04 AM}

Yep,

3rd party security program will sometimes change the Windows security settings, the frequently reading or write files on C drive, to make sure the process move on properly, it have to change the Bitlocker's status.

You can try to disable the **automatically scan of MacAfee **to see if there is any change.  

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, September 26, 2016 10:41 AM}

Kate, suspending Bitlocker would not speed up disk writes. The disk is still encrypted and all data is still written in encrypted form.

Could you name a program that showed that behavior and felt free to suspend bitlocker?

_{Friday, September 14, 2018 3:52 PM | 2 votes}

I'm also having this issue now in sept 14th 2018... so I don't know what's causing it. Is it possible that google chrome somehow does it? 

i am looking at the event log:

at 9/14/2018 at 9:22:26... it shows event id 773: warning bitlocker was suspended for volume C:.

this is the time when i booted my computer this morning. because it had automatically shut down.. I do not know why my computer shut down. I suspect that it may have been some kind of automatic update.. either windows update or chrome maybe?

there is nothing in the bitlocker events that suggests what is suspending the bitlocker protection.

I do kind of think that only windows would have the kind of authority to suspend bitlocker and it probably does it to help with updates where it automatically restarts the computer. and upon restarting it would be bad for the computer to require user input of the bitlocker password?

I don't know for sure. anyone know where to look in the event viewer to discover what it was that prompted my computer to restart? It could be my memory in this system.. a bad bit sector that hardly gets used.. maybe? I mean idk how to tell what caused the restart.

_{Saturday, September 15, 2018 7:43 PM}

Which are you using?

- The new or old encryption scheme

- Used space or full disk encryption

I have started trying different combinations to see if I get results, but so far nothing has worked.

My bitlocker was running normally until I upgraded to Windows 10 from Windows 7 and now it suspends itself within ~20 minutes of resuming protection every time. This has persisted through a clean install.

_{Monday, September 17, 2018 7:00 AM}

Bitlocker gets suspended automatically when the computer does feature upgrades (for example to reach version 1803). You need to verify if that might apply.

_{Monday, September 17, 2018 11:57 PM}

Edit: the service "rcpnet" (the persistent tracking software made by Absolute LoJack) keeps suspending BitLocker. If you try to delete the executable from the c:\windows\system32 it will just reinstall at reboot. The best way to handle this is to contact Absolute and open a customer support case for them to work you through what you need to disable it.

********************

I did a clean install of 1803 so that should not be the case. Also, it suspends itself repeatedly, regardless of restarts, and it suspends bitlocker before I log in. This means all that someone needs to do to unlock my drive is turn my computer on and then power down and connect the drive to another computer. It typically suspends between 15 seconds and 1 hour after I resume bitlocker or automatically resuming after startup.

_{Thursday, November 8, 2018 3:27 PM}

Sean,

How did you determine the rpcnet (Absolute LoJack) is what keeps suspending BitLocker? I have been having this issue where protectors keep getting disabled for 1 reboot, reboot fixes it (or enabling protectors) but then flips back off shortly after. All of our machines have Absolute but I am only seeing this issue on one particular model which is odd, but I would like to investigate the rcpnet to rule it out.

John

_{Thursday, November 8, 2018 4:11 PM}

Hello, I have the same issue on the Windows Server 2016. It happens after each restart after a windows update. Moreover, sometimes after a restart it doesn't ask me about the Password - it boots like it doesn't have the BitLocker enabled at all and then I see: 

Die Meinung, die von mir geäußert wurde, ist keine offizielle Position von Microsoft.