Windows 10: Switching to black BitLocker pre-boot screen

On my previous Windows 10 PC, I enabled a setting that switched from the standard blue BitLocker screen to a plain-text black BitLocker screen. I have a new PC and want to do this again, but I can't remember how to do it. Can anyone tell me?

The screen I'm talking about is the pre-boot BitLocker password entry screen shown right after POST. (I don't have a TPM, so I have to enter a password there.)

The black screen I'm referencing was not BitLocker recovery or anything aberrant. It was a legitimate BitLocker pre-boot password screen, enabled via a Windows 10 setting. It was just black and had "uglier" text.

:)

 

Black Screen after Log on


Computer boots to windows log on,have no password here.After a minute on log on it go to a black screen,stays there forever. I can get to Task Manager from black Screen,lost on what to do next. Just want my Windows 10 back, not sure what caused this problem. Any Suggestion on what my next step should be?*Sad

 

Including Bitlocker Pre-Provisioning


Hi @Kari,

That was an awesome Tutorial, exactly what I've been looking for !

I have been doing a bit of experimenting and found that a slight modification to your procedure can be used to pre-provision Bitlocker encryption, as long as the machine has a TPM chip present and activated on the motherboard. This pre-provisioning, if successful, could save a few hours as compared to configuring it post-install.
Note: all of the following worked on Win 10 Enterprise x64 1709 on both an old Laptop (non-UEFI, non-Secure Boot e.g. a 10 year old Dell Latitude E4200 ) and a modern desktop (Dell Optiplex 5040 w UEFI and Secure Boot).
All that's needed is to insert a step between 2.6 and 2.7 which would check if the destination drive is encryptable, and, if it is then enable encryption of used space. Because the 'used space' at that point is almost zero it gets encrypted almost instantaneously. But, because the drive is now encrypted, anything that DISM adds to the drive gets encrypted on the fly ! End result is that when the installation is finished the drive is encrypted with Bitlocker and just needs a 'protector' (e.g. TPM and PIN) added ..

Here's what worked for me ....
- just after step 2.6, check that G: drive is actually encryptable (this also checks the BIOS, TPM activated etc.)
run command 'manage-bde -status' (if that lists the volume as encryptable, then we're good to go to next ..)
run command 'manage-bde -on G: -used' (that turns on bitlocker for the drive, and should finish after a few seconds ...... just wait a few seconds and verify that another 'manage-bde -status' now shows 100%)
- .. now proceed to step 2.7

At the end of the installation and after first bootup and logon you should see a little yellow triangle as well as an unlock icon on the drive, showing it's encrypted but with a 'clear protector' ...... then just need to add a protector, like TPM and PIN e.g. 'manage-bde -protectors -add c: -TPMAndPIN' where you will be prompted for PIN, and if all goes well, will be prompted to enter PIN in order for machine to boot up.

 

Samsung Galaxy TabPro S, and Bitlocker, and PRE-boot on-screen keyboard?

Galaxy TabPro S Gold and Bitlocker and Windows 10 Pro

samsung galaxy TabPro S gold (256g drive,8 g memory)

I just upgraded to Windows 10 pro so I could use Bitlocker.

this way I can travel,and have personal business documents on the machine, encrypted.

When I cold boot the machine, I want Bitlocker to request a PIN.

HOWEVER, Bitlocker starts to encrypt the drive (when installed) without requesting what PIN I Want.

I changed the Bitlocker registry settings, to require TPM + PIN

but then tried to encrypt teh drive and bitlocker states that some policies are in conflict.

The issue seems to be that since this is a tablet (even though it has an external keyboard), Bitlocker is concerned whether the onscreen keyboard will work as a PRE-BOOT keyboard; that is, come up at BOOT-UP, Not just come up at the WINDOWS Log-ON

can ANYONE tell me if this device's keyboard can indeed come up at a PRE-BOOT time, thus letting Bitlocker get a PIN ENTRY from on-screen?

AND, also, what are the correct Bitlocker Settings for the machine

GPEDIT.MSC from command line

Local -> Administrative -> Windows -> Bitlocker -> Operating System Drives

aNY HELP to clarify is appreciated.

ALSO, if KEYBOARD cannot b e used, can a USB stick be used, and allow the parameters to work?