Windows 10: 24H2 Upgrade Effect on Existing Bitlocker Hardware Encryption

Currently running Windows 11 23H2 on a Lenovo P1 Gen6 with Bitlocker hardware encryption active on C: and D: partitions of a Samsung Pro 4TB SSD. Will the automatic or manual in place upgrade to 24H2 retain the hardware encryption? Do I have to do anything to retain the current hardware encryption?

:)

 

BitLocker hardware encryption cannot be activated on Win10 10586/1511

Hey,

I'm having trouble enabling hardware encryption with BitLocker using Windows 10 build 10586 on a clean install with a Samsung 850 SSD. The encryption worked flawlessly before on build 10240.

I've spent hours and attempted multiple solutions and made several tests.

As mentioned, on the same machine, if clean installing build 10240 (RTM, before November update) right now, the encryption works.

I have UEFI on with Legacy/CSM off, Fast Boot on, Secure Boot on, and a clean GPT installation after using the 'diskpart clean' command.

As always, it's required to change a group policy to allow additional authentication at startup. I did that.

On a clean installation of build 10586, the wizard will say 'parameter is incorrect' when attempting to start encryption.

Microsoft did announce some BitLocker-related changes for build 10586: https://technet.microsoft.com/en-us/library/mt403325

There are also new group policies added. I've tried all combinations. They now allow you to try and force a specific encryption cipher. Samsung uses XES-AES256. I tried forcing that (as well as all other combinations) but the same error returns.

Now, here's where it gets interesting, and possibly why no reports about this have surfaced yet:
If you enable the encryption on build 10240, and then upgrade to 10586, the encryption will remain and will work properly on build 10586.

If you then attempt to 'Reset this PC', and choose the 'keep nothing' option, it will warn you that BitLocker will be disabled. Once it's done cleaning, if you attempt to enable encryption, it will again show the error.

Even if you don't reset the PC, but simply disable BitLocker on 10586 and then attempt to re-enable it, it will no longer work.

tl;dr: Hardware encryption via BitLocker on build 10586 cannot be enabled on a clean install. Currently-known workaround is installing 10240, encrypting it, then upgrading to 10586.

Any solutions would be appreciated, thanks!

 

UNABLE TO FIND MY BITLOCKER ENCRYPTION KEY

I have been reading about the coming of Bitlocker with Win 11 24H2. I purchased a PC in 2020 with Win 10 Home, and recently upgraded it to Win 11 23H2.

Following directions in an MS article, I attempted to find my Bitlocker Encryption Key. In my account info, it shows the key for my new Laptop (win 11 Home) but nothing listed for my older desktop. Is there a reason for this? I am not really interested in having Bitlocker on either device, but would like to have access to that code if I need it. Thanks, JWarner

 

UNABLE TO FIND MY BITLOCKER ENCRYPTION KEY

Emily Thank you for your reply. I went to Control Panel>Search> and entered "Bitlocker". Received "no items match your search". This is an HP PC.

However, under System>Services there is "BitLocker Drive Encryption Services" Status is Not Running and Startup is Manual, which I changed to Disabled since I do not wish to have this service. Does this indicate that the Bitlocker function does not exist on this PC? On the Win 11 Laptop (purchased in March) when I query "Bitlocker" in the Control Panel searchbar, it provides links to Device Encryption and Backup recovery key.

When I upgrade the Desktop to 24H2, will the Bitlocker function be installed?

Thank you again, JWarner