Windows 10: Bitlocker eDrive not working well on certain notebooks

I am the owner of a Dell XPS with a TCG Opal 2.0 & IEEE1667 compatible Samsung 980 Pro SSD.Before some of you will tell me not to use hardware encryption because of alleged weaknesses, I am aware of this paper and frankly modern Samsung SSDs were not affected as long as hardware encryption was utilized by TCG Opal. Also software encryption does lower performance, even with AES-NI.That being said, there seems to be a problem with eDrive when used in Notebooks such as Dell or XMG that also allow you to set a password to NVMe drives via the UEFI: Once eDrive is enabled, the UEFI of the Not

:)

 

(BUG) BitLocker eDrive hardware encryption

Thomas,

I also did a clean install about a week ago and didn't install the iRST driver. No issues whatsoever with Bitlocker and eDrive. Works great. This is definitely a bug in the Intel driver.

 

(BUG) BitLocker eDrive hardware encryption

Hi,

I did a clean install of Windows 10, and tried to use hardware encryption via BitLocker on my eDrive compliant 850 EVO ssd.

First it just would not use the hardware encryption (asks if I want to encrypt whole drive or only used portion) but I found that Intel rapid storage was conflicting with the process (version V14501081)

When I uninstalled IRST, the setup went right, but after the first reboot/system check, BitLocker has just dissapeared. It can't be found in the Control Panel (see screenshot), trying to open it via search doesn't work and it's not listed when right clicking
the system drive, but when right clicking my second HDD there is an option to enable it, this brings me to the initialization screen, the BitLocker settings still can't be accessed. There's also no lock icon on the system drive, but BitLocker does ask for
a password on bootup (don't have TPM).

When typing manage-bde -status C: in the command prompt, I get an error (see screenshot)

screenshot:

https://i.imgur.com/JiHCu3K.png

This worked perfectly on Windows 8.1 for me.

Edit: Now BitLocker suddenly started working properly. The lock sign is there and the settings are back, still this is strange behaviour.

 

Bitlocker eDrive Setup with 2nd Partition

Hello,

I have successfully encrypted my C: drive with Bitlocker. I used the new Hardware Encryption (eDrive) method and it works without a problem.

But I still think that I've encountered a "bug" in this setup. My SSD (Samsung 850 Pro) is split into two partitions. While Windows 10 says that my primary partition is successfully encrypted, it shows my second Partition (D as unencrypted.

I personally think that this is wrong or misleading. As far as I understand the eDrive functionality, it doesn't directly encrypt the partition. It only manage the encryption keys of the harddrive itself.

But the harddrive itself can't differentiate between the partitions or data (Or am I wrong here?). So shouldn't partition D: be also shown as encrypted as partition C:, as the whole harddrive has been encrypted?