Windows 10: Dell Windows 10 "TPM is not ready for use" or "An internal error occurred" BitLocker - Solution

After receiving a shipment of new laptops for our company and getting them setup, we started having the same error over and over again when trying to enable BitLocker. The error would tell us that the TPM is not ready, even when we prepared the TPM using "tpm.msc", it would still show the status as "TPM is not ready for use".We only had 2 laptops out of the batch that would let us turn BitLocker on, and we couldn't figure out why until we compared the BIOS settings. Once we figured out this error and started changing settings on the seemingly broken devices, one by one they all started allowin

:)

 

TPM Ready with reduced functionality; unable to use BitLocker

Hello.

I often browse the TenForums (and the forums for the other Windows versions too), since there are many helpful guides and tools here for whenever I'm having troubles. However, this time I've made an account to make a thread, since there wasn't a similar problem posted here yet.
Let me get to the point now. I've built myself a new desktop PC in November, and a few days ago I decided to add a TPM module to it and encrypt my drives with BitLocker. However, I'm having problems getting them both to work properly.

I'm running Windows 10 Pro, my motherboard is ASUS Z170-A and the UEFI BIOS is updated to the latest version. The TPM is enabled in the BIOS, as are Secure Boot and UEFI, which are the requirements to using the TPM on Windows 10.
When I open the TPM administration console, the status of the TPM is "The TPM is ready for use, with reduced functionality". If I click on Prepare the TPM, it briefly checks my TPM configuration, and then displays a message "The TPM security hardware on this computer is ready for use, with reduced functionality (consistent with previous OS versions)". Please note that there was no previous OS installed on this computer, and the Event Viewer doesn't seem to show any logs relevant to this message. I have tried Clearing the TPM multiple times, but the results are the same afterwards, even if I disable auto-provisioning using the PowerShell (the TPM simply takes longer to get prepared then). I am using the default, Microsoft-provided driver. I have also tried to clear the TPM from BIOS and disabling then re-enabling it, also to no avail.

Another problem, which I believe is directly related to this one is with BitLocker. I have no troubles encrypting/decrypting USB drives encrypted with BitLocker to Go, but I'm not able to properly encrypt the OS drive (Samsung 960 EVO M.2 SSD).
If I try to encrypt the drive without Running the BitLocker system check first, it encrypts just fine, but I'm forced to input the Recovery key on each and every boot (and yes, I did try to suspend BitLocker protection and re-enabling it after reboot), which gets annoying really fast *sarc. If I do perform the system check first, the computer reboots and an error message is displayed: "BitLocker could not be enabled. The BitLocker encryption key cannot be obtained from the Trusted Platform Module. C: was not encrypted.". Afterwards, I can find a Warning in the Event Viewer (which I believe is related to this), under Windows Logs > Applications and Services > Microsoft > Windows > BitLocker-API > Management, saying "TCG Log parsing failure. Error: An internal error has occurred within the Trusted Platform Module support program. Event ID: 832, ErrorCode -2144845823".

I have tried to fix this using multiple solutions/guides online from other forums and support pages, but none of them either applied to my situation, nor did they work. If you need more information about my setup, my specs are listed in my profile and I can provide any other logs and info needed.

Thanks in advance, and have a nice day .

 

TPM Ready with reduced functionality; unable to use BitLocker

Hi @MrPatko0770I just noticed this post, welcome to Ten Forums.

After you turned on your TPM in BIOS/UEFI, booted to Windows, and check if it was activated it in TPM.msc:




Did you go back into BIOS and set your keys(I believe selecting factory defaults is enough, although I'm not sure)




Also are you using TPM 2.0?

 

BitLocker On TPM ver 2.0

Hey all.

I hope that i'm asking this at the right area of this Forum.

I have a DELL Latitude 5480 with Win10 pro on it.

After enabling BitLocker, BitLocker asking for a recovery key on every reboot.

I've found that BitLocker cannot work properly with TPM ver 2.0, (Dell Latitude 5480 comes with TPM version 2.0).

After downgrading TPM, from ver 2.0 to ver 1.2, BitLocker works smoothly.

Any solution for BitLocker on TPM ver2.0?

Thank in advance.