Windows 10 Home, and need to encrpyt device with PCR7

Muhammad Arif Zaki Md Nor 21

I have windows 10 home and device encrypt is enable,
But my PCR is not 7. How can I bind it to PCR7?

Lu Dai-MSFT 28,401 Reputation points

2021-07-26T01:52:48.99+00:00

@Muhammad Arif Zaki Md Nor Thanks for posting in our Q&A. For this issue, it is more related to windows. So, I will remove the intune tag and add the windows tag.

Accepted answer

MTG 1,206 Reputation points

2021-07-23T13:18:38.48+00:00

Is secure boot enabled / was it enabled when you activated device encryption?
You could give this method a try which uses Bitlocker on Win10 home: https://www.experts-exchange.com/articles/33596/How-to-use-Bitlocker-on-Windows-10-Home.html
Please sign in to rate this answer.
Muhammad Arif Zaki Md Nor 21 Reputation points

2021-07-26T02:09:29.213+00:00

After a few test, I found out that PCR7 is relate with secure boot. If I disk encryption without the secure boot or after disk encryption I disable the secure boot, it will change the default PCR value. To solve, I need to enable back the secure boot, turn off the disk encryption, and re-do the disk encryption again. This will bound it back to PCR 7 and 11. Thank you for the help.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

1 additional answer

Eswar Koneti 2,201 Reputation points

2021-07-23T11:40:31.833+00:00

Windows 10 home edition does not support bitlocker (if you are trying for this).
I have tagged the question to windows 10 security instead of intune.

Thanks,
Eswar
www.eskonr.com
Please sign in to rate this answer.
Muhammad Arif Zaki Md Nor 21 Reputation points

2021-07-26T02:10:45.813+00:00

10 home edition does not support Bitlocker but, it support disk encryption. Anyway the problem is solve. Thank you
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Your answer