Windows 10: Device Encryption Support. Reasons for failed automatic device encryption: Un-Allowed DMA...

Hi, I have a new model of Dell laptop Inspiron i15- 5593 with Windows 10 Home - 1903 factory installed. Before updating BIOS to the current version, I checked to sure Device Encryption is turned off Settings --> Update & Security. Thing is, the option for "Device Encryption" is not one of options listed in the left panel under the heading "Update & Security". I know that is where it is supposed to be in Windows Home. In System Information: PCR7 Configuration = "Binding Possible". Device Encryption Support = "Reasons for failed automatic device encryption: Un-Allowed DMA capable bus/devices detected". The system has a TMP chip tmp.msc: Manufacturer: Intel, Mfg. Version: 500.5.0.0, Specification Version: 2.0. In Device Manager, under Security Devices, I have "Trusted Platform Module 2.0". In BIOS, the system is in UEFI Mode, Secure Boot is enabled and "PTT" Platform Trust Technology is turned on. In the Registry: Local Machine/System/CurrentContolSet/Control/Power/CsEnabled is set to Value: 1 on. It seems the system configured for Device Encryption do you agree? but I'm thinking it is not made available because the Un-Allowed DMA capable bus/devices were detected do you agree?.
I've spoken to level 2 Dell tech support. They agreed to escalate again but are pushing back that Device Encryption is not a feature of my device. This week I returned a different Dell i15-5584 because of a hardware failure that did have Device Encryption working. Before returning it I verified the 5584 had the same configuration described above, except in System Information, Device Encryption Support: Meets prerequisites. In addition to missing Device Encryption, Windows Hello Face and Windows Hello Fingerprint show can't be set up "This option is currently not available".
I would appreciate thoughts of what else I should check to get Device Encryption working. I know that MS recommends contacting the manufacturer to determine what device is causing this error but not very encouraged by the response so far from Dell. Also, does Microsoft require OEM's to design, configure, test and certify to MS that new laptops right out of the box have Device Encryption in the case of Windows Home available to be turned on? If so, anyplace I could find whether Dell certified the 5593. Thanks for your feedback!!!

:)

 

Reasons for failed automatic device encryption: Un-allowed DMA capable


Looking through MSINFO32 I see the line:
Device Encryption Support Reasons for failed automatic device encryption: Un-allowed DMA capable bus/device(s) detected

What does it mean? My laptop C:\ drive is encrypted the whole thing. Does this mean I have a problem?

I have these lines too:
Secure Boot State On
PCR7 Configuration Bound

MSINFO32-09-22-2017.txt

 

Reasons for failed automatic device encryption: Un-allowed DMA capable

Secure boot disabled because you want it that way or it broke? Maybe open a new thread about secure boot. Secure boot and Device Encryption Support Reasons for failed automatic device encryption: Un-allowed DMA capable bus/device(s) detected are different but related. Sounds like your problem deserves a new thread. You'll get better help for your secure boot issue that way.

 

Reasons for failed automatic device encryption: Un-allowed DMA capable


Here's a lot of results I found using Bing:

'Winterpret' on ice"Device+Encryption+Support+Reasons+for+failed+automatic+device+encryption"

You can read through some and see if you can figure out what all that is.