Event banner
Event details
I am moving from Trellix Disk Encryption to Bitlocker. I decrypted the machine from Trellix and then encrypted with Bitlocker. The Drive gets encrypted, however after a restart the machine is always asked for the Bitlocker key. I did notice in the System Information with Secure Boot enabled, PCR7 binding is not possible and PCR7 is not supported. I updated, TPM version, BIOS version and all drivers. Also ensured Modern Standby is enabled and secureboot too. Any ideas on how to resolve this issue? I see this on all machine in the environment.
- Jason_Sandys
Microsoft
The best resource to start with is Windows Server shows PCR7 configuration as "Binding not possible" - Windows Server | Microsoft Learn. If this does not help, I suggest opening a support case.
Thank you. One more question. For Bitlocker is SecureBoot a requirement?
- EricMoe
BitLocker system requirements are here, BitLocker overview | Microsoft Learn, it does not list SecureBoot as a requirement, but SecureBoot is a strongly recommended configuration (Secure boot | Microsoft Learn)
