Forum Discussion

The1stSpectre's avatar
The1stSpectre
Copper Contributor
Mar 17, 2022

Intune Company Portal Setup: Unable to Resolve Secure Startup Error

Greetings!

 

I have a vivo Y15 (vivo 1901) running on Android 11 but I’m unable to resolve this issue during the Intune Company Portal Setup:

 

 

However, I’m certain that the phone is already prompting for a password during reboot before you can actually use it. Clicking Resolve will only prompt me to register a new device password. There is no prompt for enabling of a secure startup PIN.

 

Manually searching for the related keywords ("secure", "start", "encrypt" and "on") in the Settings will not result to finding the option for enabling prompting of secure startup PIN during device startup.

 

Finally, I also did a factory reset of the phone and proceeded to immediately run the Intune Company Portal Setup after the minimum phone setup required but the result is still the same.

 

Thank you for your time.

Intune

2 Replies

  • Rudy_Ooms_MVP's avatar
    Rudy_Ooms_MVP
    MVP
    Mar 18, 2022

    Hi

    Looking at the ms docs https://docs.microsoft.com/en-us/mem/intune/user-help/encrypt-your-device-android?id=5004252 it is indeed mentioning the secure startup

    Could you find anything within:
    Settings>Biometrics and security>Other security settings>Strong protection

     

    File-based encryption (FBE) and full-disk encryption (FDE) (samsungknox.com)

     

    In the Biometrics and security menu, check if the Secure startup menu exists or not.
    If Secure startup is available, your device uses FDE.
    If Secure startup is unavailable, your device uses FBE.

     

    • The1stSpectre's avatar
      The1stSpectre
      Copper Contributor
      Mar 18, 2022
      Hello, Rudy_Ooms_MVP / Team,

      Thank you for the feedback.

      Unfortunately and as mentioned, my vivo Y15 (vivo 1901 not Samsung brand) is running on Android 11 and does not have any setting for secure startup or strong protection. Manually searching for the related keywords ("secure", "start", "encrypt", "strong", "protect" and "on") in the Settings will not result to finding the option for enabling prompting of secure startup PIN during device startup.

      I have also checked that document from Samsung so I guess my device uses FBE if it was Samsung.

      I have also checked the following references:
      https://docs.microsoft.com/en-us/mem/intune/user-help/encrypt-your-device-android
      https://docs.microsoft.com/en-us/mem/intune/user-help/your-device-appears-encrypted-but-cp-says-otherwise-android.

      It seems that my device can't be encrypted or there's a manufacturer's issue on the encryption in compliance to Android standards. If this is the case, is there a list somewhere of supported devices or devices with know encryption issues. There's a link in the reference provided above but it is only for Samsung devices.

      Also, can this verification be bypassed by our Intune Company Portal administrator.

      Thanks again for your time.

Resources