Windows 10: Bitlocker BCD must be verified

Is this caused by Guarded host cause all my entries in BCD are correct, Bitlocker gives error that it cannot find drive on windows 11 cause BCD settings are incorrect, but they are correct i even enumurated all

:)

 

Settings for Boot Configuration Data (BCD) to install Bitlocker on Win 10

Situation: Win 10 Pro on an EVO 850 SSD drive. OS was cloned to SSD (which is new) from orig HD in the machine. TPM exists on machine, and is active. Used Samsun Magician to allow encryption (not exact wording) before cloning occurred. Wish to install Bitlocker on both drives. Tried to install on C: and got this error:

Installation on D: (a pure data drive) seems to have worked.

1. What is the correct path for this?
   
2. What are the correct BCD settings?
   
3. Is this going to require re-doing the partitions / re-installing Windows?
   
4. [edit] Might this be as simple as needing to do a BIOS pwd and turn on Secure Boot in the BIOS (which I turned off in the process of making the SSD the boot disk)? See question here.
   

I suspect that the partitions are not correct to permit this (which the BCD reference suggests), but cannot seem to verify. Partition setup, as created by Samsung cloning s/w, is:

1. Recovery
   
2. System (EFI System)
   
3. Reserved (MSR)
   
4. Primary (OS)
   

Recovery is active (i.e. reagentc was told to enable, and it's usable).

 

Need to turn off Bitlocker to install Windows 10

Hi,

We suggest doing the following steps again to resolve the issue. To complete the procedure, make sure that you have the following information:

• You must be able to provide administrative credentials.
• The drive must be BitLocker-protected.

To suspend BitLocker Drive Encryption on an operating system drive, please follow the steps below:

• Click Start, click Control Panel, click
  System and Security, and then click BitLocker Drive Encryption.
• Click Suspend Protection for the operating system drive.
• A message is displayed, informing you that your data will not be protected while BitLocker is suspended and asking if you want to suspend BitLocker Drive Encryption.
  
• Click Yes to continue and suspend BitLocker on the drive.

Let us know how it goes.

 

How to clean up BCD entries? Rebuild the BCD?

This is normal that under Recovery Environment, The letters are re-assigned. This is why you have to be careful and select the correct one.
@dictum
Advice: Never use Easy BCD with Windows installed using GPT disk. Use Easy UEFI instead provided you know what you are doing. Easy BCD only works with MBR disk type.
Base on the screen shot above. Your disk 0 is your new Windows and your disk 1 contains the old Windows. Disk 3 contains a 512MB Fat32 partition and I don't know what that is. I suggest you disconnect disk 3 for now before proceeding.

Let rebuild new BCD's for both disk 0, and disk 1. Please follow step by step on the 2 screen shots below. On step 3, write down the drive letter for PM981_New. In the screen shot, My Windows is still assigned to C but it might be different from yours. In step 10, if the drive letter is different than C, then use the letter in step 3.

Do exactly the same for disk 1, this time select disk 1 in step 4 and assign letter V in step 7, Use V and the drive letter for Old Windows in step 10. This will create a new BCD for PM981_Old and you will be able to boot separately from boot menu.

From boot menu, select which one to boot from.
Once booted into Windows. If you wish, you can set up dual boot for Windows old & New. Under This PC, look for the drive letter of the offline Windows and type:
bcdboot X:\Windows where X is the letter of the offline Windows