Problems enabling Bitlocker on Surface Pro with Windows 8.1
Using a brand new Surface Pro (first generation) out of the box, installed current updates, then 8.1, and any further recommended updates after 8.1 was installed.
I've installed a two other things that don't seem connected to the issue: the Cisco Anywhere VPN client and Visual Studio 2013.
I'd like to enable Bitlocker, but during the verification step, the following error is displayed, with no options to continue:
This PC deosn't support entering a BitLocker recovery password during startup. Ask your administrator to configure Windows Recovery Environment so that you can use BitLocker.
The "administrator" in this case is me, and I don't:
- ... understand why this has happened
- ... know how to fix the issue, as if it's really necessary to make this change, what would I do?
This worked well with Windows 10, with a couple of tweaks, swapping steps 5 & 6. You must use the FORMAT command before exiting DISKPART. Also, if like me you have upgraded from 8.1 to Enterprise, to Windows 10 you might have multiple recovery partitions. You can use reagent /info
beforehand to check which partition is currently being used. The reagent /enable
process failed when I tried to change to an older recovery volume.
- Start CMD as Administrator, enter
DISKPART
- Enter
LIST VOLUME
- Then select the recovery volume with
SELECT VOLUME x
where x is the corresponding number of the volume - Enter
ASSIGN LETTER=Q
(to assign the letter Q:/ to the recovery partition) - Enter
FORMAT fs=ntfs label="Recovery" quick override
where label="Recovery" is optional and works with any other name as well - Enter
EXIT
to leave diskpart - Run
Robocopy.exe C:\Windows\System32\Recovery\ Q:\Recovery\WindowsRE\ /copyall /dcopy:t
- Run
reagentc /setreimage /path Q:\Recovery\WindowsRE
- Run
reagentc /enable
- Run
reagentc /info
to check whether the setup worked, "WinRe-Status" should be enabled now - Use DISKPART to remove the drive letter previously assigned to the recovery partition. To do that repeat steps 1. to 3. and then enter
REMOVE LETTER=Q
As already stated the Windows 8.1 upgrade wipes out the WinRE environment from the recovery partition. If you look in Disk Manager the partition is now empty when under Windows 8 there was content.
You can also confirm this by running
reagentc /info
This is fixed by by copying the winre.wim file from the C:\Windows\System32\Recovery folder
which recreates the WinRE area in the recovery partition. Here are the steps to accomplish this:
- In
DISKPART
assign a drive letter to the recovery partition (I usedQ:
) - Run
Robocopy.exe C:\Windows\System32\Recovery\ Q:\Recovery\WindowsRE\ Winre.wim /copyall /dcopy:t
- Run
reagentc /setreimage /path Q:\Recovery\WindowsRE
- Run
reagentc /enable
- Use
DISKPART
to remove the drive letter previously assigned to the recovery partition.
Confirm it works with:
reagentc /info
As already stated the Windows 8.1 upgrade wipes out the WinRE environment from the recovery partition. If you look in Disk Manager the partition is now empty when under Windows 8 there was content.
You can also confirm this by running
reagentc /info
This is fixed by by copying the winre.wim file from the
C:\Windows\System32\Recovery folder
which recreates the WinRE area in the recovery partition. Here are the steps to accomplish this:
- In
DISKPART
assign a drive letter to the recovery partition (I usedQ:
)- Run
Robocopy.exe C:\Windows\System32\Recovery\ Q:\Recovery\WindowsRE\Winre.wim /copyall /dcopy:t
- Run
reagentc /setreimage /path Q:\Recovery\WindowsRE
- Run
reagentc /enable
- Use
DISKPART
to remove the drive letter previously assigned to the recovery partition.Confirm it works with:
reagentc /info
There needs to be an extra step for this method to work. After you assign the drive letter but before exiting diskpart, run:
format fs=ntfs quick override
This reformats the partition and the override allows the partition to be formatted. I had run into this same issue while deploying Windows 8.1 to Surface Pro 3 tablets. The Pro 2s that we have all worked fine but there was something funny with the new 3s.