Windows 10: Bitlocker TPMAndPINAndStartupKey authentication does not work

Hi there


I currently use Bitlocker to fortify my laptop security due to its disk encryption feature. I also want to enable pre OS authentication to align with "Bitlocker Countermeasure" by using both PIN number and USB stick.


I use this command to enable pre OS authentication with TPM, PIN and Startup key:


manage-bde -protectors -add C: -tpsk -tsk F:


C: is my operating system disk

F: is my USB stick


But there's a problem: after I use above command, my laptop with USB stick contain startup key still boot without prompt PIN number enter! I suppose this feature will prompt user to enter correct PIN number and require user to plug correct USB stick which contain startup key .


I also use this command but it didn't help:

manage-bde -protectors -add C: -TPMandPINandStartupKey -tp <my_pin> -tsk E:


Please tell me if I did anything wrong or this feature is not supported. My laptop is HP Pavilion x360 Convertible with following specs:

• OS: Windows 10 Pro 20H2 OS build 19042.844
• RAM: 8GB
• Hard Drive: SSD 240 GB
• CPU: Intel Core i3-7100U 2.4 GHz

:)

 

Hello Fingerprint authentication doesn't work when Bitlocker TPM is enabled

I have Bitlocker enabled using TPM authentication. However, now Hello fingerprint authentication does not work to log in. If I "suspend protection" for Bitlocker, fingerprint authentication works just fine. But does not work when I re-enable Bitlocker
protection.

Anyone else see this?

 

Need to turn off Bitlocker to install Windows 10

Hi,

We suggest doing the following steps again to resolve the issue. To complete the procedure, make sure that you have the following information:

• You must be able to provide administrative credentials.
• The drive must be BitLocker-protected.

To suspend BitLocker Drive Encryption on an operating system drive, please follow the steps below:

• Click Start, click Control Panel, click
  System and Security, and then click BitLocker Drive Encryption.
• Click Suspend Protection for the operating system drive.
• A message is displayed, informing you that your data will not be protected while BitLocker is suspended and asking if you want to suspend BitLocker Drive Encryption.
  
• Click Yes to continue and suspend BitLocker on the drive.

Let us know how it goes.

 

Bitlocker

Hello Nandana,

To enable BitLocker on your computer, you follow the steps below:

• Sign in to your Windows account with an administrator access.
• Press the Windows key.
• Type and enter BitLocker.
• Click Turn on BitLocker.
• If the system is asking to sing in to administrator access, please do so.

For additional information about BitLocker, we suggest that you check the frequently ask question on this
link. The link provided applies to Windows 8.1 to higher version.

If you have other concerns, don't hesitate to reach us.