Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Monday, February 10, 2020 10:49 PM
My Windows 10 Pro install and all BIOS, firmware, drivers are up to date using Windows Update and Lenovo Vantage. I have bitlocker enabled requiring TPM a USB Key and a PIN. The machine boots fine and I can get to windows but there is a concerning error message that shows up for each reboot. I can also boot using the recovery key i have on USB by itself just fine.
Bitlocker-Driver Event 24641
An unexpected error was encountered attempting to retrieve the BitLocker volume master key during restart.
Things I've tried.
I have tried suspending bitlocker and rebooting then re-enabling and I have tried disabling hibernate. Not much online for this issue. The laptop is a Lenovo ThinkPad P1 Gen 2.
All replies (7)
Tuesday, February 11, 2020 1:33 AM
Try the following steps:
Updated Bios according to your manufacturer support.
In powershell run 'Disable-TpmAutoProvisioning'
Open TPM administration > 'Clear TPM...' then 'Prepare the TPM'
Enable Bitlocker, saved key to USB then restarted
Source;
https://community.spiceworks.com/topic/1449167-bitlocker-laptop-about-to-go-out-the-window
Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.
Also check this Microsoft website.
Event ID 24608 — BitLocker Startup
Regards
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Tuesday, February 11, 2020 10:55 AM
Hello,
In addition to Teemo's suggestion, I recommend you to upgrade your system BIOS firmware to latest version, see if that helps.
Regards.
Microsoft MVP (Windows and Devices for IT)
Windows Insider MVP
Windows Help & Support [www.kapilarya.com]
Tuesday, February 11, 2020 3:45 PM
I should also mention this error is sometimes paired with it after a shutdown and some time lapses and I start up. For some reason if i shut down and start back up recently after it does not have this error.
Bootmgr failed to unseal VMK using the TPM - 24680 event id
Tuesday, February 11, 2020 3:46 PM
Hello, I updated the BIOS yesterday to see if that was the issue
Tuesday, February 11, 2020 4:07 PM
With the above recommendation, bitlocker is currently enforced and operable. Do i need to suspend protection and then follow those steps or decrypt and disable bitlocker and redo the process completely following the instructions above?
Wednesday, February 12, 2020 2:46 AM
Yes, I think your idea is feasible.
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Wednesday, February 12, 2020 10:12 AM
I also vote for decrypting and re-encrypting c:
Additional partitions do not need to be re-encrypted, but you should have the recovery key for those handy just in case.