Hello Ricko, Looks like you're almost there, I suspect you're right in saying it's probably just something simple. As it's just the boot volume that's not encrypting (and that has the same policy settings as your secondary drive), I would look at the following first: Is BitLocker enabled for the Boot Volume? Right click Start > Control Panel > System and Security > BitLocker Drive Encryption > Make sure BitLocker is enabled for the C:\ drive too. Is the Boot Volume ready to be encrypted? The drive must have atleast two partitions - one partition must include the drive Windows is installed on. This is the drive that BitLocker will encrypt, the other partition is the active partition, which must remain unencrypted so that the computer can be started. Microsoft states that " once you've encrypted the drive Windows is installed on, you can also encrypt additional data drives on the same computer " - I'm not aware of any issues encrypting the secondary volume first but it's worth mentioning this. The boot volume must also be formatted with the NTFS file system and have a BIOS that is compatible with TPM and supports USB devices during computer startup. If this is not the case, you will need to update the BIOS before using BitLocker. Let me know how you get on with those Ricko and we'll go from there.
↧