Windows 10: Bitlocker asking for recovery key on every startup after encrypting the drive using VeraCrypt

Hi,



I don't know if this question has been asked already, but here it is:

Since I've encrypted my system disk on my tablet with veracrypt, bitlocker is asking it's recovery key each time on boot because (what the error message says in eventviewer) it can't contact the TPM device anymore. I previously had encrypted my disk with bitlocker. Is there a way to relink bitlocker and the TPM device (still according to the error message) or is it just the bitlocker way to say that another encrypting software have changed the data?


I need to say maybe that I'm not stuck, I have the recovery key recorded somewhere else and so I jsut need to type it in each time. It's just that it is not supposed to ask that at each boot.


In the perfect scenario I would like that veracrypt is still used and so asking me at boot the password and then bitlocker would be still in use but not asking me for the recovery key. I don't see or understand why bitlocker can't verify the TPM device anymore just because veracrypt did encrypt the disk afterwards?

yes I'm under windows 10 Pro
and there is no problem to use both togetehr. Bitlocker was encrypting the disk using the SSD encryption algorithm with the help of the TPM device and as planned, bitlocker wasn't asking for the recovery key because it was capable to use the TPM device for that at boot. Veracrypt have then be used to encrypt the disk in a software manner, it's very efficient using the AES algorithm, no problem of slowing down here. But then bitlocker was suddenly asking the recovery key after the veracrypt screen asking for the master password.



***Original title: how to relink bitlocker and TPM device after having used veracrypt encrypting process for systemdisk?***

:)

 

[BitLocker] Encrypting without generating recovery key?


Hi,

is there a way to encrypt a BitLocker drive without generating a recovery key?

Other encryption tools such as DiskCryptor/VeraCrypt/TrueCrypt or those found on Linux can simply be used with one PIN, no recovery key required.

BitLocker also allows to encrypt using a PIN. But, even when using a PIN, it still always seems to require to generate a recovery key in addition.

Is it possible to disable recovery keys altogether? So that only a PIN is set up to encrypt the drive and nothing else?

Why would you want a recovery key anyway, when you are already using a PIN? Why would you want to generate two passwords (PIN + recovery key) instead of just one password (only PIN without any recovery key)?

 

Bitlocker enabled itself after VeraCrypt reboot

Hi, I installed veracrypt on my desktop this morning running windows 10. Everything went perfectly. I then tried installing VeraCrypt on a microsoft surface pro 3 running windows 8.1. After the initial VeraCrypt reboot, I entered my VeraCrypt password
(which was successful) and then it took me to a bitlocker recovery screen.

I've never touched bitlocker, specifically because I don't trust it. This was the whole reason I installed VeraCrypt. Since I didn't enable it I obviously don't have the recovery key, and after checking my microsoft account, I don't have any recovery keys
listed there either.

I was able to remove the VeraCrypt Prompt (after booting the USB that cointained the EFI folder) because VeraCrypt hadn't actually encrypted the drive yet, it was a simple restart to test the password prompt. For whatever reason, this enabled BitLocker
and I'm pretty sure I'm completely screwed. No system restore points visible, can't boot into safe mode, no advanced recovery options working.

 

use veracrypt with bitlocker?

Can I first encrypt my drive with veracrypt then encrypt it with bitlocker for two layers of protection? I know my device is compatible with both.