Windows 10: Don't all HDDs support Bitlocker?

Hello. Not all HDDs are supported by BitLocker? I have the OS installed on an M2 SSD on my laptop, plus two Seagate HDDs one 2T and one 1T. The 2T has the Bitlocker activation option, but the other 1T does not have this option. I put an older Toshiba 500G as a test 2017 and it shows this option. Thank you.

:)

 

AMD A10-6800K 4.1GHz Quad Core Overclocking possibility

Thanks, have heard this before...is their a step by step procedure to OC using the bios settings you suggest.
i don’t intend pushing this to its limit...but some increase would be great, any suggestions on a good air cooler ?

thanks

 

Corrupt HDD + BitLocker + Data Recovery

Hey guys,

I have a BarraCuda 500GB 2.5 HDD. The HDD is failing. I checked with HD Tune Pro and it only gets about 2% error scan before it just fails and won't scan anymore. Lots of damaged blocks. The HDD is encrypted with BitLocker. I have the 48 number key. The laptop where the HDD was installed in wouldn't boot. So I installed the HDD into another computer using an external enclosure using Windows 10. The HDD is recognized as a BitLocked drive and asks for the key. I insert the key and it is accepted. But from there Windows fails to load it and it just hangs and eventually says the drive needs to be formatted. I am trying to get any data off this drive. I have some questions.

1. How do I permanently remove BitLock from the drive once I unlock it? Or should I permanently remove BitLocker to have a higher chance of recovering data?
2. How does recovering data work on a BitLocked drive?
3. Is there a specific tool I should be using to recover data on a BitLocked drive?
4. When should I attempt to repair the drive? Before or after I unlock Bit?

If anyone has a step by step guide I would greatly appreciate it. Thanks!

 

BitLocker error - PCR7 binding is not supported

Hello,



I have an issue with BitLocker not working and advising "PCR7 binding is not supported"

I've undertaken extensive research on the internet to resolve the issue and drawing a blank.

(This laptop was previously using BitLocker without issue prior to me wiping the system and doing a clean install)



When attempting to enable BitLocker on a HP Elitebook G3 1030 running Windows 10 Pro the following error message is receive following reboot.



"BitLocker could not be enabled.

The data drive specified is not set to automatically unlock on the current computer and cannot be unlocked automatically.

C: was not encrypted"



This error message occurs only when I configure BitLocker with the "System Check." (Checking the box when it asks).

The error message is received after reboot.

If I do not select the System Check, it works, but it prompts the user every single reboot to input the recovery key.



Apparently if BitLocker keeps asking for Recovery key at startup even after multiple attempts, one is trapped in a recovery key loop.

You may enter a BitLocker recovery key loop if your device TPM is configured to use PCR (Platform Configuration Register) values that are not the default values (PCR 7 & PCR 11) to which BitLocker binds.



Initial efforts to resolve the situation included:

• Clear the TPM via the BIOS
  
• Removing all partitions on the hard disk using Parted Magic
  
• Clean re-install of Windows 10 via Microsoft website installer
  
• Reset of the BIOS settings
  
• Reinstalling the latest BIOS update
  
• Verifying in the BIOS that Secure Boot is ENABLED
  

Following this I executed the advice from this Microsoft forum to reset TPM protectors

https://learn.microsoft.com/en-us/a...cker-drive-encryption-the-data-drive-specifie

Basically this involved using command prompt to issue the following commands

1. "manage-bde -protectors -delete c: -t TPM"
   
2. "manage-bde -protectors -add c: -tpm"
   

Unfortunately this did not resolve the problem



Issuing the command "manage-bde -protectors -get c:" Reveals that my system is relying on PCR 0, 2, 4, 11 instead of PCR 7, 11



When running "System Information" as administrator the following key information about my system was returned

BIOS Mode = UEFI

Secure Boot State = On

PCR7 Configuration = Binding Not Possible

Device Encryption Support = Reason for failed automatic device encryption: PCR7 binding is not supported.



This website had some useful suggestion that were followed. PCR7 Binding Is Not Supported in Windows 11/10? [Fixed] - MiniTool

Step 1 = I ran "tpm.msc" and it advises "The TPM is ready to use"

Step 2 = The BIOS is configured with UEFI enabled and the system disk partition style is GPT

Step 3 = Secure Boot State = On (as per "System Information")

Step 4 = 4 In command prompt I ran the command "powercfg /a" and receive the message back

"The following sleep states are available on this system:

Standby (S0 Low Power Idle) Network Connected

Hibernate

Fast Startup"



When opening Event Viewer and selecting "Applications and Services Logs -> Microsoft -> Windows -> BitLocker-API -> Management" it lists a string of events with mostly alternating Event ID's as follows:

Event 834 (Information) - BitLocker determined that the TCG log is invalid for use of Secure Boot. The filtered TCG log for PCR[7] is included in this event.

Event 816 (Warning) - BitLocker cannot use Secure Boot for integrity because the TCG Log for PCR [7] contains invalid entries.



Out of desperation, I reached out to Microsoft support and one week later I'm still waiting for the next level of suport to contact me.



Does anyone have any advice of what else I can try to resolve this BitLocker issue?