Windows 10: Trying to Enable Encryption: Device Encryption Support Says "Un-allowed DMA capable...

Hello,I am trying to enable Bitlocker encryption on some of my drives. However, I am running into some problems. When I try to turn on Bitlocker in my settings, I get the "Failed to open the BitLocker control panel tool. Error code: 0x800004005" message. I went into my system info to see if my device has the "Meets Prerequisites" on Device Encryption Support, however it says "Reasons for automatic device encryption: Un-allowed DMA capable bus/devices detected" and I'm not sure how to proceed from there.I've seen elsewhere that I need to have TPM enabled in BIOS, which I do. I am also current

:)

 

How to enable Device Encryption Support?

How to enable Device Encryption Support?

Device Encryption Support Reasons for failed automatic device encryption: Hardware Security Test Interface failed and device is not Modern Standby, Un-allowed DMA capable bus/device(s) detected

 

Reasons for failed automatic device encryption: Un-allowed DMA capable

Looking through MSINFO32 I see the line:
Device Encryption Support Reasons for failed automatic device encryption: Un-allowed DMA capable bus/device(s) detected

What does it mean? My laptop C:\ drive is encrypted the whole thing. Does this mean I have a problem?

I have these lines too:
Secure Boot State On
PCR7 Configuration Bound

MSINFO32-09-22-2017.txt

 

Device Encryption Support. Reasons for failed automatic device encryption: Un-Allowed DMA capable bus/device(s) detected

Hi, I have a new model of Dell laptop (Inspiron i15- 5593) with Windows 10 Home - 1903 factory installed. Before updating BIOS to the current version, I checked to sure Device Encryption is turned off (Settings --> Update & Security). Thing is, the
option for "Device Encryption" is not one of options listed in the left panel under the heading "Update & Security". I know that is where it is supposed to be in Windows Home. In System Information: PCR7 Configuration = "Binding Possible". Device Encryption
Support = "Reasons for failed automatic device encryption: Un-Allowed DMA capable bus/device(s) detected". The system has a TMP chip (tmp.msc): Manufacturer: Intel, Mfg. Version: 500.5.0.0, Specification Version: 2.0. In Device Manager, under Security Devices,
I have "Trusted Platform Module 2.0". In BIOS, the system is in UEFI Mode, Secure Boot is enabled and "PTT" (Platform Trust Technology) is turned on. In the Registry: Local Machine/System/CurrentContolSet/Control/Power/CsEnabled is set to Value: 1 (on).
It seems the system configured for Device Encryption (do you agree?) but I'm thinking it is not made available because the Un-Allowed DMA capable bus/devices were detected (do you agree?).

I've spoken to level 2 Dell tech support. They agreed to escalate again but are pushing back that Device Encryption is not a feature of my device. This week I returned a different Dell (i15-5584) because of a hardware failure that did have Device Encryption
working. Before returning it I verified the 5584 had the same configuration described above, except in System Information, Device Encryption Support: Meets prerequisites. In addition to missing Device Encryption, Windows Hello Face and Windows Hello Fingerprint
show can't be set up "This option is currently not available".
I would appreciate thoughts of what else I should check to get Device Encryption working. I know that MS recommends contacting the manufacturer to determine what device is causing this error but not very encouraged by the response so far from Dell. Also,
does Microsoft require OEM's to design, configure, test and certify to MS that new laptops right out of the box have Device Encryption (in the case of Windows Home) available to be turned on? If so, anyplace I could find whether Dell certified the 5593.
Thanks for your feedback!!!