Bitlocker - The PIN provided does not meet the minimum or maximum length requirements.

Question

_{Wednesday, May 31, 2017 3:55 PM}

Hello,

I have been using Bitlocker with no issue for a couple of years.  Even with the Windows 10 deployment, it did not greatly affect our Bitlocker process.  Just recently, I am not able to run the "manage-bde -protectors -add C: -tpmandpin 12345".  Instead I receive an error, "The PIN provided does not meet the minimum or maximum length requirements."

This is troubling as we have many machines with our current code already deployed, and would need a way to be able to set these newer machines to the same code.  I have gone through the GP and changed the minimum requirement to 4, and 5.  Previously this was set to "not configured" which generally, per Microsoft, "If you disable or do not configure this policy setting, users can configure a startup PIN of any length between 4 and 20 digits."

Any advice would be greatly appreciated!

All replies (6)

_{Wednesday, May 31, 2017 5:20 PM}

Hello,

Have you tried a PIN length of 6 digits.

from this blog

/en-us/windows/device-security/bitlocker/bitlocker-group-policy-settings#bkmk-unlockpol3

It references a minimum of 6 digits

Thanks, Darrell Gorter [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

_{Wednesday, May 31, 2017 8:19 PM}

Hi.

Saw another thread here where someone was wondering if the documentation was wrong on this one and 4-20 should be 6-20 starting with windows 10. I can confirm that.

_{Thursday, June 1, 2017 8:59 AM}

Configure minimum PIN length for startup

From this group policy’s description, we can see that The startup PIN must have a minimum length of 6 digits and can have a maximum length of 20 digits.

Your manage-bcd command configures a 5 digits’ PIN, which doesn’t meet the minimum length.

Regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Thursday, June 1, 2017 9:04 AM}

@Teemo Tang: Please notice the discrepancy of your screenshot and the GPO description that he quoted. So obviously, the documentation is wrong.

_{Thursday, June 1, 2017 9:14 AM}

@Ronald, Thanks for your reminding, I have feedback this situation

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Tuesday, June 6, 2017 2:38 AM}

Hi GS AFB,

Would you mind letting me know the update of the problem? If you need further assistance, feel free to let me know. I will be more than happy to be of assistance.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].