Cannot ennable Disk Encryption - Hardware Security Test Interface failed and the device is not InstantGo

Question

_{Monday, April 1, 2019 10:49 AM}

Hi,

As an administrator user in Windows 10 Home on a Asus UX410U laptop , I can't find the option to encrypt my disk.

I read :

System Information > System Summary > Device Encryption Support > Reasons for failed automatic device encryption: Hardware Security Test Interface failed and the device is not InstantGo

OS Name    Microsoft Windows 10 Home
Version 10.0.17134 Build 17134
Other OS Description    Not Available
OS Manufacturer Microsoft Corporation
System Name LAPTOP-0GVF8PHB
System Manufacturer ASUSTeK COMPUTER INC.
System Model    UX410UAR
System Type x64-based PC
System SKU  
Processor   Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz, 1992 Mhz, 4 Core(s), 8 Logical Processor(s)
BIOS Version/Date   American Megatrends Inc. UX410UAR.306, 05/09/2018
SMBIOS Version  3.0
Embedded Controller Version 255.255
BIOS Mode   UEFI
BaseBoard Manufacturer  ASUSTeK COMPUTER INC.
BaseBoard Model Not Available
BaseBoard Name  Base Board
Platform Role   Mobile
Secure Boot State   On
PCR7 Configuration  Binding Possible
Windows Directory   C:\Windows
System Directory    C:\Windows\system32
Boot Device \Device\HarddiskVolume1
Locale  United Kingdom
Hardware Abstraction Layer  Version = "10.0.17134.619"
Username    LAPTOP-0GVF8PHB\clement fleury
Time Zone   Romance Summer Time
Installed Physical Memory (RAM) 8.00 GB
Total Physical Memory   7.88 GB
Available Physical Memory   2.69 GB
Total Virtual Memory    9.76 GB
Available Virtual Memory    3.46 GB
Page File Space 1.88 GB
Page File   C:\pagefile.sys
Kernel DMA Protection   Off
Virtualisation-based security   Not enabled
Device Encryption Support   Reasons for failed automatic device encryption: Hardware Security Test Interface failed and the device is not InstantGo
Hyper-V - VM Monitor Mode Extensions    Yes
Hyper-V - Second Level Address Translation Extensions   Yes
Hyper-V - Virtualisation Enabled in Firmware    Yes
Hyper-V - Data Execution Protection Yes

Thanks for your help !

All replies (9)

_{Tuesday, April 2, 2019 8:15 AM}

Hi,

Windows 10 Home does not include support for BitLocker, and device encryption requires device support of a TPM 2.0 chipset and InstantGo.

InstantGo is a hardware feature that is installed and implemented by the Computer Manufacturer.

To check your Hardware information, InstantGO is not supported on the computer, Disk Encryption is not available.

Hope above information can help you.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Tuesday, April 2, 2019 10:12 AM}

Thanks for your reply @Farena .

Does that mean that :
1/ if I setup Windows 10 Pro then I will be able to encrypt my disk with BitLocker
2/ or I will never be able to encrypt my disk because my device is not InstantGo

I would say 1/ according to : https://www.microsoft.com/en-us/windows/windows-10-specifications#primaryR5 , do you confirm ?

Cheers

_{Wednesday, April 3, 2019 5:39 AM}

Hi clement fleury,

Yes, you may refer to that official article.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Thursday, April 4, 2019 8:10 AM}

Thanks for your answer, but it is not very clear...

Do you confirm that with Windows 10 Pro , BitLocker encryption will work on my device ? (yes/no)

_{Thursday, April 4, 2019 8:19 AM}

Hi,

If you're not sure about the BitLocker encryption will work or not, you can refer to the following link for details:

https://www.windowscentral.com/how-use-bitlocker-encryption-windows-10

Note: This is a third-party link and we do not have any guarantees on this website. And Microsoft does not make any guarantees about the content.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Tuesday, April 9, 2019 3:02 AM}

Hi,

Was your issue solved?

If yes, would you like to share your solution in order that other community members could find the helpful reply quickly.

If no, please reply and tell us the current situation in order to provide further help.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, April 19, 2019 6:18 AM}

Hi,

Since you have not responded for a long time, we will temporarily archive this post.

If the reply helped you, please remember to mark it as an answer.

If you have any questions,  please feel free to contact us.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, June 14, 2019 12:07 PM}

Hi there,

no my issue is not resolved.

I checked and I really have Trusted Platform Module 2.0 , but still I don't see the option to enable BitLocker as specified in your link (https://www.windowscentral.com/how-use-bitlocker-encryption-windows-10 : "How to turn on BitLocker on the Operating system drive") .

I think the real problem is InstantGo , but it is not required in your link (https://www.windowscentral.com/how-use-bitlocker-encryption-windows-10) .

So my question is really simple :

- is InstantGo required to enable Windows 10 Home BitLocker encryption ?

- if yes, how can I enable it and will upgrading to Windows Pro enable it ?

- if no, howcome I cannot enable encryption ?

Thanks

_{Saturday, May 23, 2020 8:01 AM}

Hi,

It may be too late but I thought I would reply as I was in the same situation and managed to work around the problem. There was no single source that got me to the end but based on where you are currently at, I would suggest google "experts exchange how to use bitlocker on windows 10 home" (sorry it won't let me post a hyperlink.

Basically, Win 10 Home has bitlocker but lacks some features, like a nice interface and the ability to add a "password" - you can add a numerical passcode (8 x 6 digit PIN) and autounlock with TPM.

Prior to encrypting your drive, I recommend learning all the switches available with the 'manage-bde' command. For example, the encryption defaults to xts-aes128 encryption but if you add the -em switch, you can encrypt to xts-aes256.

For example, from the pre-boot environment, you would type into the command prompt: manage-bde c: -used -em xts_aes256

This will start the encryption process. You can then load back into Windows and add all protections.

If you are using an old drive (ie one that has had deleted files that you want to prevent being recovered) then don't use the -used switch. The -used switch is good to use if you are encrypting a new drive since you won't have had deleted files on there that need to be protected from recovery apps.

Hope this helps