BitLocker is getting worse by the minute.

Dru2 said:

That wasn't the question. And answering the question may have offered a solution without need to turn off BitLocker

Click to expand...

I was responding to your saying "assuming the OP is using BitLocker without a TPM." after he said TPM was enabled.

geneo said:

I was responding to your saying "assuming the OP is using BitLocker without a TPM." after he said TPM was enabled.

Click to expand...

I missed the "TPM enabled" part so my "BitLocker without TPM" post can be ignored since it doesn't apply

Dru2 said:

Hmmm, maybe, but... BitLocker can be run without TPM - How to Use BitLocker Without a Trusted Platform Module (TPM)

Also Microsoft's FAQ - Can I use BitLocker on an operating system drive without a TPM?

Click to expand...

Correct, you can run Bitlocker without a TPM. You just have to store the key somewhere when you go this route. Thus, when starting up the computer you would need to manually provide the passphrase, or have the key on a USB stick that the system could read to decrypt the drive during the boot process.

With TPM support, that key is stored there and supplied automatically at boot.

Hi there
Not sure what the whole BitLocker and TPM thing is -- AFAIK you can run Bitlocker without a TPM - Bitlocker has been available for "Donkeys Years".

With TPM active and enabled there's something about needing the OS to be encrypted if bitlocker is required - which IMO on a HOME computer seems a pretty bonkers idea. This could be an issue here.

Some places use Bitlocker so that it stops people copying company material to an external device to take home etc etc - however W11 I gather has the ability to disable all USB connections so that's another way for companies to protect their data.

However some of that security can be evaded when people have their own "One Drive" / "Google Drive" or other cloud data accounts so bitlocker isn't a guarantee either that data can't be "filched" one way or another.

While the OP might well have valid reasons for wanting to use bitlocker -- I'd investigate more modern systems of security if that's really an issue here.

Cheers
jimbo

As I understood at the time when the pc was not eligible for W11 was that enabling secure boot, TPM and bitlocker would bring it up to scratch. As soon as I found out it was indeed eligible, I changed from the beta channel to the DEV channel and immediately Microsoft offered the upgrade. Later, when the beta channel was included for W11, I changed back to it. Getting rid of bitlocker has not entirely solved my problems with the hard drives in the pc. When I changed to W11, I was running the M2 500Gb drive as C and then cloned it successfully to a Samsung 850 Pro 256Gb. I removed the M2 after reformatting it and failed to get it to work in another pc. Now it is back in this pc, it will function perfectly as a data drive, but will not clone back to be used as C drive either using Mini Tool Partition Wizard 10, or Macrium Reflect.

tinmar49 said:

As I understood at the time when the pc was not eligible for W11 was that enabling secure boot, TPM and bitlocker would bring it up to scratch.

Click to expand...

You don't need to enable BitLocker, just TPM and Secure Boot. As stated many times, neither of those enablements are going to turn on BitLocker, or start encrypting your drive.

And BTW, you can tell if your drive was/is already encrypted by looking for a lock next to it....



In the example above, I've encrypted my OS drive using BitLocker, thus the lock icon. An open lock means the drive is unlocked for use.

Also be very aware some laptops can come from the factory with the drive encrypted, and it doesn't necessarily have to be "BitLocker", there could be some other third party encryption scheme going on. My suggestion is the examine the PC "before" upgrading so you know it's status before the upgrade.

Good luck

Since shutting bit locker, the lock icons have gone. I am still unable to get the M2 drive to accept the operating system, and only secure boot is left to be the cause. I will try another clone and start a new thread with the results.

Hi,
So a lock is now a windows 10 logo lol

tinmar49 said:

the lock icons have gone. I am still unable to get the M2 drive to accept the operating system, and only secure boot is left to be the cause. I will try another clone and start a new thread with the results.

Click to expand...

I am not sure what is the problem seems that Microsoft is making it very hard to use the OS if you are not having TPM. Should just turn of the bit-locker or file feedback in Feedback hub. When I was in Windows 11, it was fine but I did have tpm 2.0

I have enabled the AMD firmware TPM since before upgrading to W11. Bitlocker is switched off now and secure boot is also off. My only remaining move would be to switch off the TPM to see if that is preventing the M2 drive from being the OS drive. I would switch them back on if that ever happens.
I have just tried with TPM disabled and with it enabled with no luck.
It looks like my much earlier thoughts of a reinstall from an ISO might be the only way.