Updating the BIOS on Dell Systems With BitLocker Enabled
Сводка: This article provides information on steps to carry out before updating your BIOS on systems with BitLocker encryption enabled. Also, what to do if a latest BIOS update has caused a BitLocker error. ...
Симптомы
Table of Contents:
1. Updating BIOS with BitLocker
When, updating the BIOS on a system with BitLocker < Enabled > please be aware of the below.
You will then be prompted to enter the recovery key to progress, and the system will ask for this on each reboot.
If the recovery key is unknown this can result in data loss or unnecessary operating system reinstall.
Причина
2. BIOS revisions causing an issue with BitLocker
BIOS revisions listed below have been found to cause an error with BitLocker where it will not enable/resume when TPM is in TPM 2.0 mode. If you have recently updated your system BIOS to the version below. Update again to the new version available on Dell Support Site to resolve the issue.
| Platform |
Affected BIOS Version |
| Latitude 7275 |
1.1.29 |
| Latitude 5175 / 5179 |
1.0.22 |
| Latitude 7370 |
1.11.4 |
| Latitude E7270/E7470 |
1.14.3 |
| Latitude E5270/E5470/E5570 |
1.13.3 |
| Precision 3510 |
1.13.3 |
| Precision 7510/7710 |
1.11.4 |
Разрешение
3. Solution
Method One: The easiest solution is to suspend BitLocker before updating the BIOS.
-
Click Start
-
Go to Control Panel > System and Security > BitLocker Drive Encryption
- Select Suspend Protection (you may be prompted to select yes to confirm this).
-
You can now update the BIOS (latest can be downloaded from the Dell Support Website).
-
Or article How to update the BIOS on a Dell System
-
After BIOS updated you can then Resume Protection
Method Two: Edit group policy for BitLocker.
-
Click Start. In the Search box, type gpedit.msc and press Enter.
Note: The system user must have administrator right to edit group policy. -
Local Computer Policy should be displayed, and options for Computer Configuration and User Configuration.
-
Under Computer configuration, click Administrative Templates.
-
Open Windows Components. Click Bitlocker Drive Encryption folder.
-
In the right pane, click Configure TPM Platform Validation Profile.
-
Double–click the Require additional authentication at startup policy. Set the policy for Disabled.
-
Click Apply, then OK. Restart the system.
-
Once BIOS is updated, repeat these steps and Reenable BitLocker.
Method Three: Edit group policy for BitLocker.
-
Click Start. In the Search box, type services and press Enter
-
Scroll down and double-click BitLocker Disk Drive Encryption Service.
-
Under General Tap on the popup window, next to Start up type click on the drop-down box (manual) the select Disable
-
Under Services Status, click Stop.
Дополнительная информация
Recommended Articles
Here are some recommended articles related to this topic that might be of interest to you.
- How to Successfully Update the TPM Firmware on your Dell Computer
- Using scripting or automation for TPM firmware updates from Dell
- TPM Option Is Missing in the System BIOS Setup Latitude, Precision, or XPS
- How to Troubleshoot and Resolve Common Issues with Trusted Platform Module (TPM) and BitLocker
- Automatic Windows Device Encryption or BitLocker on Dell Computers