How to re-enable TPM after decrypting C: drive from BitLocker?

I have a Surface Pro 6. One day my computer got locked with BitLocker (for no apparent reason). After recovering the key I disabled device encryption and decrypted my hard drive.

If I now do manage-bde -status, I get this information:

However, this seemed to have disabled my TPM. When I boot into UEFI, the TPM option is disabled, and when trying to enable it I get a message saying

The system failed to change the state of the TPM. Please reboot the system to try again.

Disabling Secure boot does not help (I tried enabling TPM with secure boot on and off).

TPM is also not found under Device Manager, as my Security Devices section does not appear even after I check "Show Hidden Devices".

I learned that this could be an issue related to BitLocker. In efforts to enable TPM, I followed instructions that told me to pause BitLocker, but that command gave me an error:

I have another surface pro that has BitLocker encryption enabled, and the TPM is enabled (as by default).

From this, I have a few questions:

• Are the issues between decrypting my drive and being unable to turn on TPM related?
• How can I re-enable my TPM module?

*For more information, I have Surface Pro 6, model 1796.

Solution 1:

Okay, so here’s what likely happened:

1. Your computer shipped with BitLocker enabled with a TPM-protected key
2. The TPM died
3. You had to enter the recovery key because the TPM was no longer accessible to automatically unlock the BitLocker encryption

You need to get the device repaired, there is nothing more you can do.

Solution 2:

No, disabling bitlocker will not disable TPM. TPM is managed from the BIOS/UEFI, and bitlocker is not capable of enabling/disabling TPM.

That said, if you change secure boot options in the BIOS/UEFI, it may disable TPM.

Given that your TPM is currently disabled, it sounds like you switched to legacy mode. For TPM to be allowed, Secure Boot must also be enabled.

It may be that you must enable secure boot, reboot, enter UEFI and then be allowed to enable TPM.