BitLocker

Question

I get this error "data is invalid" when I try and encrypt my drive. 

Please help.

Answer 1

Hi.

My name is Miles.

       It is recommended that you restore the default and recommended settings for safe boot and PCR values after BitLocker is suspended to avoid entering BitLocker recovery when applying future updates to UEFI or TPM firmware.

To enable secure boot on a surface device with BitLocker enabled:

1. Suspend BitLocker using the Suspend BitLocker cmdlet, as described in method1
2. Boot the UEFI surface device using one of the methods defined in surface UEFI using Surface Laptop, new Surface Pro, Studio surface, Surface Book and Surface Pro 4.
3. Select the security section.
4. Click on change the settings in "Secure Start".
5. Select Microsoft only and click OK.
6. Select Exit, then restart to restart the device.
7. Resume BitLocker using the Resume-BitLocker cmdlet, as described in method1

     To change the PCR values used to validate the BitLocker drive encryption:
   

8. Disable the group policies that configure PCR or remove the device from the groups where these policies apply. For more information, see:

https://technet.microsoft.com/en-us/library/ee7...(v=ws.10).aspx#BKMK_deployment

2. Suspend BitLocker using the Suspend BitLocker cmdlet, as described in method1.
3. Resume BitLocker using the Resume-BitLocker cmdlet, as described in method1