Windows 8.1 Refuses to Encrypt System Drive

Question

Dell Venue 8 Pro Tablet running Windows 8.1 (not Pro). After lots of frustration with this device I decided to wipe it completely and do a fresh install of Windows. And indeed, all of my previous problems just disappeared. - But there now is a new one: BitLocker refuses to (auto-) encrypt the system drive as it is supposed to do. Windows claims that device encryption is temporarily suspended but will resume after the next start. However, no matter how often I restart the device, encryption/protection remains in the suspended state. The Venue 8 Pro has a TPM, or more precisely a fTPM (firmware TPM). I'm somewhat familiar with managing TPMs and so I went through the procedures to prepare the TPM (which was what corresponding event logs suggested) but It didn't help. As the OS version is plain Windows (and not Windows Pro), BitLocker functionality is very limited, but sufficient to reveal that 'Key Protectors' are missing. If I understand Windows 8.1's handling of auto-encryption, the blank Key Protectors should have been filled in as soon as Windows managed to save a Recovery Key to my outlook account. That, however, appears to never happen. Perhaps because Windows has seen the Device before this fresh install. But even removing the device from my account, then adding it back did not change things.

drahnier · Accepted Answer

To answer my own question: KB2949621-v2

St. Lamar · Answer

That was pretty painless. Had to switch to a Microsoft log-in and then turn off the cloud crapola that I don't need. Now it says that it will finish encrypting in the background.

I guess the next question is "Who owns this problem?" or "Who has the solution?"

My first instinct is that it's a Microsoft problem and you should reach out to them first. You may find that you're a little Indian (among many Indians) and actually need Dell backing you up.

However, I think that were I you, I would be tempted to reset the device one more time. Sometimes strange things happen, like when you work on something for a long time and it begins responding... and you can't for the life of you say exactly which part of what you tried fixed it.

St. Lamar · Answer

Hi, DRAHNIER - This may be just a bump, but I have a V8P that WAS encrypted and then I reset Windows and turned it off. It has to be off to do a BIOS update! Anyway, I'll try it again and see what happens. I'll report back later. In the meantime, anybody who is more knowledgeable than me about this, please chime in.

St. Lamar · Answer

I'm pretty sure that I read with one of the BIOS updates to plug the device in and turn off any encryption. Another fellow over at the other forum is having problems with Bitlocker, too. (By the way, is it officially called 'Bitlocker' anywhere? On these devices, I've only seen documents saying 'encryption.' That may be because it's not a Win Pro level device.)

drahnier · Answer

Well, - you actually do not need to turn BitLocker off on the Venue 8 Pro to do a successful BIOS update (I assume, this is because the Venue has a fTPM - but it's just a guess). - I've just applied the same fresh install procedure to a second Venue 8 Pro, and guess what: I ran into the very same problem. - I, too, think that this basically is a Microsoft problem, and, yes, without any backing from Dell, I'd have virtually no chance to get this issue pushed towards any knowledgeable Microsoft guy/girl. That's is why I'm posting this here (and in one of Microsoft's TechNet forums). I'd really like to get this figured out as I take BitLocker of an extraordinary valuable feature. Unfortunately, most people still are not aware of BitLocker and what it is used for, and why it is a 'must have'.

drahnier · Answer

Thanks for the link to the 'other forum'. Makes one feel sooooooo much better knowing that one's not alone with a particular problem ... That other guy is seeing the exact same problem as I do. And his setup has another distinctive thing in common with mine: We've both installed a not yet released version of what is called 'Windows 8.1 Spring Update'. That fact might be key here. One comment in that thread suggests Microsoft servers responsible for handing the BitLocker keys can not be reached currently. And yes, 'BitLocker' is, as far as I know, the official name for Microsoft's drive encryption technology which has been around for quite some time.

ric866 · Answer

Hi DRAHNIER,

I have exactly the same problem with my Venue 8 Pro. Just looked up KB2949621-v2, but have been unable to get any meaningful results (other than your post here, and at technet).

If you could point me in the right direction, or drop me a little info about the fix, that would be very much appreciated. I am afraid TPM (especially firmware based) is not my strong point. But an encrypted device is an absolute must for me.

Kind Regards

Ric

drahnier · Answer

RIC866: The corresponding hot fix package is available from Microsoft on request, or just try this link (not sure whether it still works - if not, pm me): http://hotfixv4.microsoft.com/Windows%208.1/Windows%20Server%202012%20R2/sp1/Fix501784/9600/free/473788_intl_i386_zip.exe

ric866 · Answer

Hi DRAHNIER,

Thanks for the link, unfortunately when I attempt to install it Windows tells me it's not applicable to my PC.

After speaking to Dell support, they have decided the venue need to be returned. We will see how it comes back.

Kind Regards

Ric

drahnier · Answer

RIC866: --- Which version of Windows 8 are you running on your Venue 8 Pro? --- The hot fix is only applicable to devices which are up to a certain patch level. --- Microsoft is going to release Update 1 (aka. 'Spring Update') for Windows 8.1 tomorrow. Before returning your device, you should perhaps install that Spring Update, then - in case the problem is still there - give applying this hot fix another try.

ric866 · Answer

Hi Drahnier,

Many thanks again for you help with this. You were exactly right and I managed to install the required updates in the end. Unforunately even after installing all the hotfixes the the problem persisted and after disabling -> enabling the TPM it was no longer visible to Windows Device Manager. After a full system restore (as per our policy for a device being returned for repair) the TPM re-appeared, but was still non-functional. In the fixes I have tried the unit exhibited some very strange behaviour with a few (and infrequent / unpredictable) BSOD's.

The unit is currently with Dell undergoing repair, I am told it is receiving a motherboard service kit. Though I have little idea what that entails, I suspect it is a complete board swap.

Thanks again for all your help, I will keep you posted.

Kind Regards

Ric

Tablets & Mobile Devices

Windows 8.1 Refuses to Encrypt System Drive

Was this post helpful?