Windows 10: Weird bitlocker settings

So at my work and home I have been setting up Bitlocker. Today at work I was setting up Bitlocker on a PC and we could not get a password for a option to unlock the device. The only option we get is to either use a USB or a pin. As per the compliance officer we have to require an encryption passphrase upon boot and I am not big on pins. How do I get my passphrase ability back? Thanks.

:)

 

Surface Pro 3 from Win 8.1 Pro to Win 10 Pro: Bitlocker fails to turn on in Win 10

It's a slight bug with a fresh surface pro 8.1 install. Bitlocker appears to be sorta on. What I did was enabled bitlocker, encrypted the entire disk, then paused bitlocker while it was upgrading windows 10. When it came up in windows 10, bitlocker was turned
back on. It still had an ! for the disk, but when I told it to turn on, it through a wizard error, then set things back right.

Most importantly, the reagentc.exe looks right. Apparently there is an issue with winre and bitlocker conflict at times. This is probably why I had to explicitly turn it on then pause it. Otherwise it would end up in the weird state where winre couldn't
setup/enable due to bitlocker.

I just finished turning bitlocker off in windows 10 (decrypting everything) and then turning it back on again. No problems.

You may also get away with turning it on and off again in 8.1 before the upgrade. Not sure.

 

Need bitlocker key

Thank you for your response. It's weird that after the update the password doesn't work anymore. The best possible way to get over and resolve this one is by contacting your device manufacturer. The only advance support that we have for BitLocker is the
more detailed support article from our advance support site on this link.

Regards.

 

Do you have TPM? You can check with the get-tpm powershell command. From elevated command prompt Code: Microsoft Windows [Version 10.0.10586] (c) 2015 Microsoft Corporation. All rights reserved. C:\WINDOWS\system32>powershell Windows PowerShell Copyright (C) 2015 Microsoft Corporation. All rights reserved. PS C:\WINDOWS\system32> get-tpm TpmPresent : False TpmReady : False ManufacturerId : 0 ManufacturerVersion : ManagedAuthLevel : Full OwnerAuth : OwnerClearDisabled : True AutoProvisioning : NotDefined LockedOut : False LockoutCount : LockoutMax : SelfTest : PS C:\WINDOWS\system32>[/quote] If so the TPM enters the password for you and your system is protected by your Windows password. Only if you don't have TPM you can enter a password.

In addition you can enter a PIN and/or use a USB key. A pin is recommended and can be alphanumeric.

Source

You might like to read this thread - it has some discussion / explanations when someone had a similar question. Installed Bitlocker does not ask for password on computer start-up! - Windows 10 Forums

 

All of our laptops have the TPM chip but this is the first one that ask for a pin or usb, I know how the TPM works and also you cannot use the Alphabet in pin (we tried). Otherwise I think once the alphabet gets involved your pin is now called a pass phrase.

Any ideas on how to get the pass phrase option again or could anyone tell me why I would want less security.

 

Have you looked here: BitLocker - Turn On or Off for Operating System Drive in Windows 10 - Windows 10 Forums

 

You need to check group policy. Requiring pin or usb (or both) and allowing alpha characters in pin are defined in these 2 settings. What do you have?

 

Okay So I found the answer, I needed to turn off TPM in the bios for this to work, if enabled even in GPO you cannot get it to prompt for passphrase. I know some might find it weird that we want this but in my organization we feel a little more safe if the computer gets stolen knowing they would have to get pass the encryption password prompt before the Windows login.

 

Glad you got it sorted