Windows 10 Bitlocker

Soldato
Joined
6 Jun 2011
Posts
2,741
Hey,

So I'm trying to get bitlocker setup for the first time for my C: and E: drives. When I first click turn on for E: it seems like it would work easily but when I try and do the same for the C: Windows drive it gives me this error:

1mS0NZy.png


What on earth am I supposed to do? Why would it work for one drive but not the other?

Thanks :)
 
Well it means that you will need to input a flash drive at boot as the bios cant save your crypto key.

What motherboard do you have or is it a laptop?
 
Its because its not booting of your other drive so it can store the crypto key in windows.

To boot of your windows drive it needs the crypto key stored somewhere else (Thats why it uses TPM)

You have a TPM header on your board.. If you look at your motherboard at the bottom right you have your 3 power buttons... To the left of that is a com port and to the left of that is the TPM header...

XV2FOt8.png


You could buy a TPM module off the net and simply install it they are around $15:)

TPM pinout of your board so you can check if one is compatible :P
mJ7W93Q.png
 
Last edited:
Its because its not booting of your other drive so it can store the crypto key in windows.

To boot of your windows drive it needs the crypto key stored somewhere else (Thats why it uses TPM)

You have a TPM header on your board.. If you look at your motherboard at the bottom right you have your 3 power buttons... To the left of that is a com port and to the left of that is the TPM header...

XV2FOt8.png


You could buy a TPM module off the net and simply install it they are around $15:)

TPM pinout of your board so you can check if one is compatible :P
mJ7W93Q.png

Thanks for the really helpful response!

So do most newer motherboards have this built in then? It's almost an excuse to upgrade my motherboard but would be the worst timing ever lol.
 
i have an asus z97 and its not built in. Just a header like yours..

Your other option would be to just leave a USB flash drive plugged in the back :P
 
i have an asus z97 and its not built in. Just a header like yours..

Your other option would be to just leave a USB flash drive plugged in the back :P

Might have to just stick to a USB then I think. I guess this is a common issue for a lot of home users. Though I don't suppose many people use bitlocker if they are just basic users.

Thanks again mate :)
 
You can just use a password instead of a USB. Not sure which is best though, at least with the password if someone steals your PC they won't get the password. Not sure if you can password protect the USB as well or not though.
 
Because your system does not use TPM you have to use a USB and password

The actual encryption password is kept on the usb and your password decrypts that.
 
It says choose how to unlock and then:

insert USB drive
Enter a password

Looks like two different options as you can click on either. I would rather it was both to be honest as that would be more secure!
 
Does anyone know if the hard drive decrypts fully before a Windows login? I'm just wondering if the USB is also protected because it needs someone to login for it to decrypt.
 
Hm sounds different to the older versions.

Win 7 required a tpm or USB stick, windows 8 enabled the use of password without the usb/tpm requirement but not without enabling the hidden setting that's described in the link above :)

You will need to put the recovery key somewhere safe though.
 
Back
Top Bottom