10-16-2017 09:07 PM
I have this problem on my T470S, I have the latest bios.
Under startup in the Bios in the Startup UEFI/Legacy Boot is set for Both
UEFI First and Legency 2nd. Everytime I bootup the Windows 10 keeps asking for the encryption key. I had to decrypt the drive.
I tried changing it to UEFI only on the Bios as according to the thread indicates as a test to encrypt the drive again and reboot to see if that would happen again.
But when I bootup I now kept getiting the boot menu and showing ATA HDD0 Curicial_CT525MK300SSD and then PCI LAN and not into Windows 10
I changed everything back, can anyone give me the right setting in the bios for my to use bitlocker and not enter the key everytime I reboot the computer.
10-17-2017 04:56 AM
10-17-2017 08:02 AM
I typed in the command in WIndows and it says Legency mode.
Does that mean I have to change the bios to UEFI and reinstall my WIndows 10.
Then try to bit lock the laptop and this will take care of the issue of Bitlocker asking for the key everytime I boot up.
12-11-2017 11:09 AM
Hi there, having essentially the same problem here on multiple machines and the posted solutions do not seem to apply. Of note is that rebooting a computer is fine, but shutting it down and turning it back on puts it into Recovery mode.
-Lenovo T470s W10DG (20JT)
-Windows 7 Enterprise x64
-BIOS versions 1.14, 1.19 and 1.20
Event log for one of these states the same:
"Bootmgr failed to obtain the bitlocker volume master key from the TPM because the PCRs did not match."
This issue does not occur on our T470s with Windows 10, or any other model in Windows 7 (T460s, T450s, T440p, T430 and correspond X models)
12-11-2017 11:24 AM
With legacy BIOS you must be running TPM 1.2, because TPM 2.0 is not supported in legacy.
The way to debug this is with my tool readPcr.exe: https://www.dropbox.com/s/mxl53f2dpl5vuwn/readPcr.zip?dl=0
After booting to Windows without a recovery prompt, run readPcr.exe (from admin command prompt) and capture the output. Then boot to Windows after the recovery prompt (and entering the recovery key) and run it again. Figure out which PCR is changing and we can go from there.