Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Thursday, July 20, 2017 8:26 PM
I am trying to turn bitlocker on for my C: drive (operating system drive) and I get this error message.
Bitlocker could not be enabled.
The data drive specified is not set to automatically unlock on the current computer and cannot be unlocked automatically.
C: was not encrypted
It is as if it is trying to turn on bitlocker for a removable drive but obviously it is not one. Can anyone suggest how to make this work?
FYI I am reimaging about 30 Fujitsu laptops and it has worked perfectly on about 21 of them up until today. For whatever reason today I imaged two of them and both of them are doing this.
All replies (13)
Monday, July 24, 2017 8:23 PM âś…Answered | 1 vote
Ok, so my theory with GPT/TPM2.0 can be skipped.
Auto-unlocking for the OS drive bears no logic. Sorry, why would you encrypt and then auto-unlock? No, that is not possible, since the unlock protector needs to be saved to an encrypted drive in order to have it protected.
The solution could be something strange. To encircle it, please do as follows:
Reset your bios to defaults. Insert a new, clean drive, install win10 and only win10, no other software and retry.
Friday, July 21, 2017 12:13 AM
Make sure TPM is active and on in the BIOS.
Make sure your BIOS is updated to the latest firmware and chipset drivers.
You should also update the TPM driver. This can be done through the Device Manager.
S.Sengupta, Windows Insider MVP
Friday, July 21, 2017 6:19 AM
From my search, try to update the BIOS then turn on BitLocker again.
Besides, note your BIOS USB HOST Controller settings, make sure it is set as All rather than None.
Regards
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Friday, July 21, 2017 9:40 AM
Please check this fujitsu forum entry
Quote:
In my case the problem was due to weird BIOS settings that seemed to have no effect when using Windows 10 but affected the boot and thus BitLocker too. The setting
Advanced - Peripheral Configuration - USB Host Controller - USB Devices
was set to None and the problem was solved when this setting was changed to All.
Basically the setting seemed to prevent the use of USB drive when booting. So if you experience similar BitLocker problems with any other BIOS, try to find a setting that controls the use of USB drives.
--
Please tell us how you tried to encrypt: what protectors did you try to use: password/TPM/USB key?
Friday, July 21, 2017 7:20 PM
Thank you all,
I have made sure the BIOS and Chipset (and all other drivers, ie. TMP, etc.) are up-to-date. I have checked the USB Host controller as well and it is set to Enabled.
I have doubled checked all of these very same settings in the BIOS of the Fujitsu Laptop that I imaged the day before (and I WAS able to turn on bitlocker for the C: / OS drive) and they are all identical. The protectors that I am using are TPM and PIN and Numerical Password. Also double checked these settings on working laptop.
I have searched the Fujitsu and TechNet forums and have not found this identical issue anywhere. all References to this error have been in relation to removable drives, and have stated that you have to have your OS drive encrypted to make this feature work. I am trying to encrypt my OS drive.
Also, the OS is Windows 10
-Heather :)
Friday, July 21, 2017 7:47 PM
Also, if I turn on bitlocker, select Enter PIN, create my PIN, save the Key to a file, select encrypt entire drive, AND THEN uncheck the Run Bitlocker system check, it will encrypt the drive. when I reboot it asks for that PIN an no matter what I put in there is says wrong PIN and I eventually have to enter the recovery key to get past the bitlocker screen.
-Heather :)
Monday, July 24, 2017 6:44 AM
Heather, the behavior you describe "no matter what I put in there is says wrong PIN" is normally seen when people miss one thing: with a TPM 2.0 chip, you have to use GPT partitioning. If you have MBR, the TPM2.0 will not work and the recovery key is the only thing that works. Please check your partitioning and eventually convert it to GPT using the tool MBR2GPT
Monday, July 24, 2017 7:53 PM
**After checking the Partition Style I did not do this because it is already GPT**
-Heather :)
Monday, July 24, 2017 8:07 PM
Also when I try to turn on AutoUnlock via elevated command prompt or powershell it says "Automatic unlocking cannot be used on the OS Volume". I'm a bit confused.
-Heather :)
Monday, July 24, 2017 8:31 PM
Unless Your Drive IS A RAMDRIVE Bit locker is Useless Any Ways
Monday, July 24, 2017 8:48 PM
Ok I will try this. I did try a new, clean drive but did not try resetting the BIOS first. Ill let you know what happens.
-Heather :)
Monday, July 24, 2017 9:37 PM
This worked. Thank you! Can you guess what it may have been? Must have been a bios setting I assume.
-Heather :)
Not a BIOS issue exclusively - I rest BIOS on another one of the laptops, formatted the SSD and tried to reimage and it produced the same error.
Thank you Robert for this suggestion though, at least I have a work around. I just wish there was a better solution for the remaining laptops than having to install new hard drives. That's a lot of money I'd really rather not spend. If there is a way to fix this issue and still use the existing hard drive that would be really helpful.
Friday, September 22, 2017 7:01 PM
So I have another one doing this same thing. However this time this does not solve it.
I have tried all the other steps for resolving this and nothing is working. Same type of laptop. same in every way.
I flashed the BIOS on this one as well. And I am positive that the partition is GPT.
Can you think of any other possible solutions?
-Heather :)