Windows 10: BitLocker rapidly generating Numerical Passwords

We have a site where a bunch of Windows 10 1903 devices won't update. The updates apply, the computer reboots and rolls back the updates. We noticed that when you manually try to suspend BitLocker, you get a message "The data area passed to a system call is too small.". I find absolutely no hits on this with regards to BitLocker.


I started playing around with manage-bde and was shocked at the output. There are over 80 numerical passwords!


I did a: manage-bde -status

That showed Key Protectors TPM and over 80 Numerical Passwords.


I did a manage-bde -protectors c: -get and got a huge list of passwords. I compared the recovery key known to Sophos SafeGuard and deleted all the passwords, with the exception of the one know.

manage-bde -protectors c: -delete -id: {GUID}


After removing numerical keys, I could suspend BitLocker and resume without issue. I was then able to apply updates. Upon restart, while the system was finishing applying updates, I was running:

manage-bde -cn $computername$ -status

I saw the Numerical Password count climb while the system was booting! By the time I could log into windows, there were 20 Numerical Passwords!


I then simplified the process by doing a:

manage-bde -protectors c: -delete -type recoverypassword

After doing that, all that remained was TPM. Rebooted and the system regenerated a Numerical Password, but it continues to create many.


We have opened a ticket with Sophos, which we don't think we'll get very far with them. This is, after all, a BitLocker issue. This is happening to at least 50 devices, and there could very likely be more that haven't gotten our attention yet, as they having filled the cache so much that updates quit.


Help! What would cause BitLocker to generate so many Numerical Passwords?


Thanks in advance for any tips.

Joe

:)

 

Bitlocker - Pre Boot Password - alpha, numeric, special characters

I am only able to setup Bitlocker to use a numeric PIN for pre boot authentication.

How can I setup Bitlocker to require a password using alpha, numeric, special characters for pre boot authentication?

 

why doesn't my bitlocker make me type a password?

Hi,

I understand that you have issue with Bitlocker password. I will certainly assist you with this.

Please provide us below details for better assistance,

• 
  Is your Bitlocker enabled on your system?
  
• 
  Have you made any changes on your system before this issue?
  

Please follow these steps and check if that helps.

Method 1: I suggest you to start the BitLocker Device Encryption service.

Follow the below steps:

1. Press Windows key + R from the Keyboard.

2. Type services.msc and hit Enter.

3. Search for BitLocker Device Encryption service.

4. Double click on BitLocker Device Encryption service and click on Start button.

5. Click on the dropdown list and set the Startup type to Automatic.

If the issue persists then change the password and change the settings on how drive is unlocked at startup.



Hope it will fix your issue. Please let us know the status of your issue.

Thank You.

 

changing bitlocker password, Windows 10

Hello Keith,

We suggest to change it from Control Panel. You may follow the steps below:

• Press Windows key + X.
• Select Control Panel.
• Click BitLocker Drive Encryption.
• Click Unlock drive.
• Type your present password and click Unlock.
• The drive will be unlocked and you will notice more links on the right of that particular unlocked drive, click
  Change password.
• Now, you may type your Old password, New password and Confirm new password.
• Click Change password.

Let us know how it goes.

Regards.