Cannot enable Bitlocker on several Lenovo T470s machines

Question

_{Friday, April 12, 2019 3:04 PM}

"The startup options on this PC are configured incorrectly..."

Windows 10 64-bit, same image loaded on similar machines will enable Bitlocker with no problem

TPM 2.0 is enabled

Things I've tried so far:

• Enabled **Disallow standard users from changing the PIN or Password **setting in group policy
• Enabled **Enable use of BitLocker authentication requiring preboot keyboard input on slates **setting in GP
• Enabled secure boot using UEFI only

Any help would be greatly appreciated.

All replies (6)

_{Friday, April 12, 2019 5:43 PM}

Hi,

Thank you for your feedback.

Try clearing the TPM  to an unowned state. After you clear the TPM, the Windows 10 operating system will automatically re-initialize it and take ownership again. And then check if it works.

Best regards,

Hurry

Please remember to mark the reply as an answer if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Friday, April 12, 2019 6:05 PM}

It seemed to think about it a moment longer after trying this, but still returned the same error. 

_{Sunday, April 14, 2019 12:44 PM}

Hi,

Thank you for your feedback.

1. Try to update BIOS driver to the latest version.

2. Try to change the 'Computer Administration\Administrative Template\Windows Components\BitLocker Drive Encryption\Operating System Drives\Require additional authentication at startup' settings in gpedit. You just had to enable the policy and uncheck the 'Allow BitLocker without a compatible TPM' and the BitLocker setup wizard allowed you to continue.

3. The last way to reisntall the system and check if it works.

Best regards,

Hurry

Please remember to mark the reply as an answer if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Tuesday, April 16, 2019 1:29 AM}

Hi,

Is there anything else I can do to help you on this issue?

Please feel free to contact me if you have any questions.

Best regards,

Hurry

Please remember to mark the reply as an answer if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Tuesday, April 16, 2019 1:25 PM}

Sorry, Hurry. 

If I understand your previous suggestion correctly, it would then require a PIN to be entered every time the machine reboots. Is that correct?

_{Wednesday, April 17, 2019 3:00 PM}

Hi,

Thank you for your feedback.

Yes. It should be correct. Didn't you operate at the time?

Best regards,

Hurry

Please remember to mark the reply as an answer if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]