Windows 10: Device Encryption Support in System Information does not say "Meets prerequisites"

I bought Windows 10 Pro version 10.0.18362 Build 18362 and am running it on a Lenovo Z50-70 just to gain access to the Device Encryption facility.


When pulling up my system information where the device encryption support states the following "Reasons for failed automatic device encryption: TPM is not usable, PCR7 binding is not supported, Hardware Security Test Interface failed and device is not Modern Standby, Un-allowed DMA capable bus/devices detected, TPM is not usable".


Can someone explain this to me and how I might be able to enable Device Encryption on my PC? Thank you in advance.

:)

 

Device Encryption Support. Reasons for failed automatic device encryption: Un-Allowed DMA capable bus/device(s) detected

Hi, I have a new model of Dell laptop (Inspiron i15- 5593) with Windows 10 Home - 1903 factory installed. Before updating BIOS to the current version, I checked to sure Device Encryption is turned off (Settings --> Update & Security). Thing is, the
option for "Device Encryption" is not one of options listed in the left panel under the heading "Update & Security". I know that is where it is supposed to be in Windows Home. In System Information: PCR7 Configuration = "Binding Possible". Device Encryption
Support = "Reasons for failed automatic device encryption: Un-Allowed DMA capable bus/device(s) detected". The system has a TMP chip (tmp.msc): Manufacturer: Intel, Mfg. Version: 500.5.0.0, Specification Version: 2.0. In Device Manager, under Security Devices,
I have "Trusted Platform Module 2.0". In BIOS, the system is in UEFI Mode, Secure Boot is enabled and "PTT" (Platform Trust Technology) is turned on. In the Registry: Local Machine/System/CurrentContolSet/Control/Power/CsEnabled is set to Value: 1 (on).
It seems the system configured for Device Encryption (do you agree?) but I'm thinking it is not made available because the Un-Allowed DMA capable bus/devices were detected (do you agree?).

I've spoken to level 2 Dell tech support. They agreed to escalate again but are pushing back that Device Encryption is not a feature of my device. This week I returned a different Dell (i15-5584) because of a hardware failure that did have Device Encryption
working. Before returning it I verified the 5584 had the same configuration described above, except in System Information, Device Encryption Support: Meets prerequisites. In addition to missing Device Encryption, Windows Hello Face and Windows Hello Fingerprint
show can't be set up "This option is currently not available".
I would appreciate thoughts of what else I should check to get Device Encryption working. I know that MS recommends contacting the manufacturer to determine what device is causing this error but not very encouraged by the response so far from Dell. Also,
does Microsoft require OEM's to design, configure, test and certify to MS that new laptops right out of the box have Device Encryption (in the case of Windows Home) available to be turned on? If so, anyplace I could find whether Dell certified the 5593.
Thanks for your feedback!!!

 

Restore Windows 10 Home to factory settings - can't disable Bitlocker

Thanks Caledon Ken and Samuria Guru

Samuria Guru - You raise a good point and perhaps I should be thinking about getting the latest version and I'd like that to be the next step although I'd really like to take the pc back to its original settings as a first task (there is a virus on the pc and I'd like to clear it away if I'm able to do that)

Caledon Ken - I looked at the guide which I hadn't seen before and unfortunately although I followed the steps, my PC search results didn't match what was displayed in the guide. So as a first step the guide asked to check the "Device Encryption Support" item (by going to System Information and then selecting System Summary.) In the instruction it says that if it reads "Meets prerequisites", then the computer includes support file encryption. Instead, next to Device Encryption Support it reads "elevation required to view" for me. This meant that I couldn't progress through the other instructions.
For example when I opened Open Settings and clicked on Update & Security and then looked for "Device encryption" it wasn't there. The steps also say that 'if the "Device encryption" page isn't available, then it's likely that your device doesn't support the encryption feature.' So I'm not quite sure what to do next. Any other ideas you have are greatly welcomed.

Many thanks

 

About Device encryption

Hi @JLAF5150,

Wierd anamoly .......!!!!!! May be it is wired into your system. *Smile

What exactly is the model no. of your Dell laptop? Maybe your Dell laptop supports Device Encryption.

To check, type System Information in the search field and run it as administrator.



Roll down and check. Does it say " Device Encryption Support - Meets prerequisites ". That's it. Your Dell Laptop incorporates Device Encryption, which is a less rigorous form of Standard bitlocker encryption.




Explained here: "Device encryption is available on supported devices running any Windows 10 edition. If you want to use standard BitLocker encryption instead, it's available on supported devices running Windows 10 Pro, Enterprise, or Education. Some devices have both types of encryption. For example, a Surface Pro which runs Windows 10 Pro has both the simplified device encryption experience, and the full BitLocker management controls."

https://support.microsoft.com/en-in/...ice-encryption

To be continued after a short break. Coffee time.( I only make my coffee)