Surface Go 2 On screen Keyboard on preboot

Question

I have a surface Go 2 tablet and I enabled TPM pin to comply to our security policy. However, I cannot active the on screen keyboard on pre-boot to enter the TPM PIN. I played around and I set tablet mode settings > always use tablet mode > do not ask and do not switch but I still do not see the on screen keyboard upon pre-boot. 

I also enabled "Enable use of BitLocker authentication requiring preboot keyboard input on slates via gpedit but that didnt resolve my issue.

Answer 1

Hi GreenBulba,

We're sorry for the delayed response.

On-screen keyboard is basically different from Touch Keyboard and the OSK can only be activated within the Windows environment. If outside the Windows environment, like when it is starting up and you have to enter the bitlocker key or the TPM pin, you might need to utilize the physical keyboard for that. Well, in your case, I have to try it on a Surface device to confirm if touch keyboard will work in the pre-boot environment. After I'm done testing few devices, I'll get back to you to give you some updates.

Kind Regards,

Crest

Answer 2

Hi Crest_Z, 

I attached a picture that might help what I am trying to say. The thing that I do not understand is that it does not work consistent, I have six tablets and some of them work and some of them do not. They have the same configuration as what I stated above - tablet mode settings > always use tablet mode > do not ask and do not switch. Looking forward on your update. Thank you. 

Answer 3

Hi GreenBulba,

Sorry for the delayed response.

I have it verified and the touch keyboard should work even outside of the Windows environment. You haven't changed anything in the device registry, right? In this case, we may need to reset the device back to factory settings and check if this is going to be fully functional after re-installing its native drivers. Please let me know if you'll proceed with the reset.

Kind Regards,

Crest

Answer 4

I have the same issue.

I have the setting "Enable use of BitLocker Authentication requiring preboot keyboard input on slates" configured in GPO.

If I boot the Surface Go 2 without a dock connected, I cannot launch the on screen keyboard, and therefore cannot enter Bitlocker PIN.

If I connect the Surface Go dock (even without a USB keyboard connected to the dock), then boot the Surface Go 2, when I touch the PIN field, the on screen keyboard appears.

My situation is pointless - why allow me to use the on screen keyboard if I have a physical dock with/without keyboard attached?!

I want to be able to reboot the Surface Go sat on my sofa not connected to my peripherals and be able to enter the Bitlocker PIN.

I am running Windows 10 LTSC 1809 with driver pack 17763 installed.