Bitlocker recovery key for every reboot

[Snax]

Hi Nick,

Apologies for my misleading response above. When I mention disdabling BitLocker, I meant turning it off and decrypting, prior to any clearing etc of TPM. I imagine cleaing TPM with BitLocker paused could have side effects but don't know for certain.

In my case, they were two brand new builds running 256GB SSDs, so encrypting and decrypting the laptops wasn't too time-consuming. They only had Windows updates, HP BIOS and driver updates, Office and antivirus software installed, so no risk of any critical data loss in this case.

As a side note, upon my first attempt I had enabled BitLocker prior to the HP BIOS and driver updates. Part of the BIOS update was to automatically pause BitLocker so the BIOS could update. After BIOS update I tried to resume BitLocker but got an error message that I can't recall right now, but something along the lines of error with Trusted Platform.

Even though I couldn't resume BitLocker, I could still turn it off and decrypt the drive then re-enable/encrypt the drive again.

On these two laptops I have since purchased Symantec Endpoint Encryption, installing the "Symantec Drive Encryption" software as an alternative to these issues with BitLocker. Unfortunately I didn't have the luxury of time to persist with BitLocker on this laptop model.

HTH.

Cheers,

Snax

[Snax]

Hi Nick,

Thanks so much for taking the time to reply with the GPEdit procdure too. I have saved your screenshot and steps for future reference if I come across this BL recovery key prompting in the future builds.

Thanks again.

Cheers,

Snax

[aoz987]

thanks for clarification.

I'm continuing to investigate this, to see how security works with the TPM, and possibly to be able to edit those parameters to AVOID the "too many PIN attempts...". etc.

i wish there were some better documentation for the TPM MANAGEMENT within the GPEDIT.MSC section

anyway, thanks, have a great day

nick

[amko77]

Hi, I have two windows 10 system installed on two partition - same disk. One of this system is encrypted with bitlocker with pin but second windows 10 is not encrypted at all. I must choose witch system to boot after start laptop. When I was use system that not encrypted and restart my laptop I type my bitlocker pin but then I must type my recovery key.  Sometimes that is not case and everything is Ok but in most case I must type recovery key. Does dual boot is supported for bitlocker? Sorry about my bad english.

[DKR7014]

HP released a BIOS update (01.06 Rev.A) in late July that addresses this issue.  

"Fixes an issue on a system with fast boot and Bitlocker enabled where the system displays a message to enter the Bitlocker Recovery key after the system is rebooted or after the system is powered on (cold boot)"

Applied this BIOS update to an elitebook 840 G4 and no more issues.

[aoz987]

where to get the bios update?

[DKR7014]

This is actually a newer bios, 1.08.  Should fix it as well and you really should install this one since it's the latest and contains other security fixes.

HP EliteBook 840 G4 Notebook PC , HP Notebook System BIOS Update , Windows 10 (64-bit) , 13.0 MB , sp82278.exe

https://support.hp.com/us-en/drivers/selfservice/swdetails/hp-elitebook-840-g4-notebook-pc/11122291/...

This is version 1.06 if you want the older one that also fixes it.

HP EliteBook 840 G4 Notebook PC , HP Notebook System BIOS Update , Windows 10 (64-bit) , 12.9 MB , sp81401.exe

https://support.hp.com/us-en/drivers/selfservice/swdetails/hp-elitebook-840-g4-notebook-pc/11122291/...

These are both for Windows 10 64 Bit.  Make sure that is your OS before updating Bios.

[aoz987]

i have the hp spectre x360 - any place to find latest bios for that (sorry for not mentioning that, just thought they had a general bios update page)

[DKR7014]

This Bios update supports these models.

PRODUCT TYPE(S): 
Notebooks
HARDWARE PRODUCT MODEL(S): 
HP EliteBook 850 G4 Notebook PC
HP ZBook 15u G4 Mobile Workstation
HP EliteBook 820 G4 Notebook PC
HP EliteBook 828 G4 Notebook PC
HP EliteBook 840 G4 Notebook PC
HP EliteBook 848 G4 Notebook PC
HP ZBook 14u G4 Mobile Workstation

Here is the Bios update for the Spectre x360.  Don't know that it will fix the bitlocker issue for you.

HP Spectre x360 - 13-4016tu , HP Notebook System BIOS Update (Intel Processors) , Windows 10 (64-bit) , 23.5 MB , sp80709.exe

https://support.hp.com/us-en/drivers/selfservice/swdetails/hp-spectre-13-4000-x360-convertible-pc/75...

PRODUCT TYPE(S): 
Notebooks
HARDWARE PRODUCT MODEL(S): 
HP Spectre x360 Convertible Convertible
HP Spectre Pro x360 G1 Convertible PC

[aoz987]

hanks very much, i will work with this to see if it helps