I cannot enable BitLocker because JSON value not found.

Question

I had an issue with a policy on one of my devices managed by MS Intune. I had to remove the device and add it back to MS Intune and now I am unable to turn on BitLocker. I get an error message saying JSON value is not found. I have done a reset of the OS before adding back to MS Intune and the device name was changed as well.

Answer 1

Try resetting TPM

go to start --> run --> tpm.msc 00> clear from right top corner, restart device after this.

If still not working then try removing device from intune/Entra restart device -- Enable bitlocker -- Join device back to Entra/Intune.

Please accept as anser if this helps.

Answer 2

@Brian J, Thanks for posting in Q&A.

From your description, I know you got error message JSON value is not found when you enable BitLocker.

To clarify this issue, could you please confirm us some information?

Did you got the error message when you enable BitLocker, or did you got the error message when you attempt to backup of BitLocker recovery info to Entra ID? There is not much useful information I can find about the error when enable BitLocker, but I find a thread about attempting backup of BitLocker recovery info to Entra ID getting the same error message, here is the link you can refer to.

https://learn.microsoft.com/en-us/answers/questions/1694397/json-value-not-found-error-when-attempting-backup

However, if you cannot enable BitLocker, could you please tell us where did you got the error message? On Intune portal or client side? And please check whether the targeted device meet the requirements to enable BitLocker.

https://cloudinfra.net/enable-and-configure-bitlocker-using-intune/#prerequisites

Non-official, just for reference.

Also, there are links about troubleshooting BitLocker issue.

https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-protection/troubleshoot-bitlocker-policies

https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/bitlocker-issues-troubleshooting

Please check above information, if there is any update, feel free to let me know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

Had this issue yesterday and resolved this by changing the registry.

Very simple solution, at least for our Organization.

Open registry and go to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE

Check if the Encryption Method value is the same for these 3.

In this case you can see that the value for EncryptionMethodWithXtsRdv is set on 4

Our organization is using this Encryption method: XTS-AES-256-bit which is value 7

Changed the value and rebooted the machine and after that Bit locker was working properly again.

Had one machine where the problem persisted so I turned of Bit Locker and turned it back on and rebooted the machine. Problem solved.