Windows 10: Why does BitLocker erase your PIN and password when it gets activated and prompts for the...

I installed a Linux OS on my computer, but had to disable secure boot in order to do so. When I then tried to load Windows I had to enter the recovery key, just to find out that my PIN had been erased and needed to be set back up. luckily this time my computer was able to reconnect to the last known WiFi network and i was able to set it back up without resetting my computer.

:)

 

Bitlocker, TPM, BIOS PASSWORD, help on interaction of these


Tech help requested
Bitlocker, TPM, AMI Bios and TPM, SAmsung TabPro S (windows) computer tablet

Tech requests to AMI bios and to samsung, for clarification of these items, has been USELESS.

I have the tablet, with Bitlocker enabled. I do NOT have a PIN enabled for bitlocker, because the ON-SCREEN keyboard does NOT activate, for bitlocker PIN entry. (Bitlocker key is apparently controlled by TPM).

I have BIOS ADMINISTRATOR PASSWORD enabled, which gets requested at MACHINE STARTUP, and DOES use the on-screen keyboard.
From what I ahve read, this ALSO is stored with TPM.

QUESTION
DOES TPM control the BIOS ADMISTRATOR PASSWORD, such that ERASING the TPM would erase the REQUIREMENT for this password, but also erase the stored BITLOCKER key such that anyone who got the hard drive, etc, would then have to enter the 40+ character recovery key to access that bitlocked partition?

QUESTION
TPM (ver. 1.2) - does repeated incorrect entry of the BIOS ADMINISTRATOR PASSWORD cause the TPM to go into lockout mode, such as it does if the BITLOCKER PIN (when enabled) is entered incorrectly?

I am trying to clarify how TPM (ver. 1.2) works, how it protects the machine, and how it handles bitlocker.

I would LOVE to have an additional PIN for this tablet, for bitlocker, but samsung will not answer whether the on-screen keyboard can be enabled to enter this.

any help, or escalation of this, is appreciated.
thakns

 

Forgotten PIN and expired password

Hi Dyari,

Thanks for your answer.

I tried steps of both links:

• #1: reset PIN code
  
  • I see no link "reset your PIN"on login page --> I can't reset it
    
• #2: change or reset windows password
  
  • My Windows account is not displayed at all on login page.
    
  • I am using a local account
    

If you have any other suggestion, I would be more than happy to try.

Regards,

Guillaume

 

Have Bitlocker Prompt for Password on Non-System Drive


Here is how I was able to get the system to prompt me for the BitLocker password each time I logged on.

My system has 2 drives one for the OS which is not encrypted with BitLocker and a DATA drive that is fully encrypted with BitLocker. What I wanted was for the system to prompt me for the password each time I booted the system and logged in. Here are the steps that allow this to happen.

1) Create a file in your Windows\System32 folder called UNLOCK.CMD using notepad with these lines in it
@Echo off & cls
echo .
manage-bde.exe -unlock -password D:

2) Create a Task Scheduler that uses the Trigger "At log on".
On the General Tab make sure to check "Run wit highest privileges"
Action "Start a Program"
Browse to C:\Windows\System32 and select Unlock.CMD

3) Now Restart your system and a DOS window should popup asking for the password.

Hope this helps others.