Intel® NUCs
Assistance in Intel® NUC products
Announcements
The Intel sign-in experience has changed to support enhanced security controls. If you sign in, click here for more information.
12944 Discussions

NUC 8i7HVK BIOS Breaks Bitlocker

RSaun1
Beginner
2,019 Views

I recently updated my BIOS to 0044, and since the update my Bitlocker no longer functions and I have to enter a recovery key on each boot.

I have since suspended Bitlocker as per Technet forums (suspend and resume to fix bootup issues), and I cannot resume with the error "A compatible Trusted Platform Module (TPM) Security Device cannot be found on this computer".

Please help!

0 Kudos
6 Replies
RSaun1
Beginner
465 Views

To give a bit more on troubleshooting steps, I've tried disabling and enabling PTT, and have restored defaults after flashing. Still no joy.

Rolling back to 0040 now.

RSaun1
Beginner
465 Views

Rollback to 0040 has worked, Bitlocker functioning correctly.

idata
Employee
465 Views

Hello saundersrg,

 

 

Thank you for joining the Intel Community Support and reporting this issue back to us.

 

 

I understand that you were having some issues after performing a BIOS update in your unit. Let me help you.

 

 

As a workaround, it is recommended to revert back to the previous BIOS version available (0040) as some issues are being reported. In the meantime, we will continue investigating this issue further.

 

 

Wanner G.
BSaun
Novice
465 Views

Did you try disabling bitlocker before doing the BIOS update? Also, not sure if UEFI boot needs to be off for bitlocker, I would consider resetting BIOS defaults as well. My experience has been that bitlocker is very sensitive to system changes, and after turned on, almost any hardware change causes it to ask forr key thinking system has been tampered with.

RSaun1
Beginner
465 Views

No, shouldn't need to disable for a BIOS update if you have the recovery keys . UEFI doesn't need to be off either. What should happen (as per MS) is if there are consistent warning messages and needing your recovery key, you suspend and resume protection after entering it. This re-saves the keys. However in BIOS 0044 it seems that the TPM/PTT seems to break and not be recognised by Windows anymore (did try restore defaults too).

Bitlocker is sensitive, but it's robust once things are re-saved, been using it for years. BIOS 0040 works 100% again, I didn't even need to suspend/resume after the downgrade.

BSaun
Novice
465 Views

Saunders RS,

thanks for for that info- bitlocker has always seemed to be a black box for me- don't understand it ver well, but glad it's there, until it develops " issues".

Reply