Considering enabling device encryption prior to taking laptop for service

Question

I know enough about PCs to be dangerous. I'm thinking of taking my 10 year old laptop running Windows Home 10 (v 10.0.19045) in for battery replacement but want to protect my data.

It's my understanding that BitLocker isn't available on Windows 10 Home but device encryption is. I started reading up on what steps to take to enable it, still not sure I want to because I have a tendency to lose passwords and don't want to get locked out of my data.

But my SysInfo says the following things:

Bios Mode = UEFI
Secure Boot State = On
PCR7 Configuration = Binding not possible
Device Encryption Support = Reasons for failed automatic device encryption: PCR7 binding is not supported, Hardware Security Test Interface failed and device is not Modern Standby

Is turning on device encryption even possible, with these conditions?

Answer 1

Hi Anonymous,

Your concern is completely understandable. It is important to be cautious, and I appreciate that you are taking this seriously.

Enabling device encryption is helpful, but it is not enough. Device encryption may protect your privacy but may not protect you from data lost.

Some service providers allow you to remove your internal hard drive, if it is detachable, before they perform any repair or maintenance. This is the safest approach because it ensures your personal and sensitive data never leaves your control. My warm advice is to choose this option whenever it is available.

When you need repair, it is also wise to choose a reputable provider with strong privacy practices and clear data‑protection policies. A trustworthy provider treats your information with the same care you do, and that peace of mind is priceless. My gentle recommendation is to always look for certified, well‑reviewed services.

I hope that above information is helpful to you.

Answer 2

Hi there,

Thank you for posting your question here!

Upon checking you SysInfo, device encryption cannot be enabled on your laptop because the hardware does not meet the requirements for Windows 10 Home and Windows is explicitly blocking it due to missing PCR7 support lack of Modern Standby and failed security checks which is normal on older systems. This means there is no safe way to turn on encryption and trying to force it could lock you out permanently so the safest and recommended approach before a battery replacement is to back up all your data to an external drive verify the files open correctly then fully shut the laptop down before handing it over which gives you protection without adding risk.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Answer 3

Device encryption on that laptop is very unlikely to be available or usable in the automatic way described for supported devices.

From System Information, Windows reports:

• Device Encryption Support = Reasons for failed automatic device encryption: PCR7 binding is not supported, Hardware Security Test Interface failed and device is not Modern Standby

According to the documentation, when checking in System Information (msinfo32.exe), a device that supports device encryption shows:

Device Encryption Support | Meets prerequisites

If it shows other values (such as PCR7 binding not supported, HSTI failed, not Modern Standby), the device does not meet the prerequisites for automatic device encryption.

The documentation also notes that device encryption:

• Requires the device to meet Modern Standby or HSTI security requirements and not have externally accessible DMA ports (for current releases).
• Is only available when System Information reports that it meets prerequisites.

Because System Information on this laptop explicitly lists reasons for failed automatic device encryption (PCR7 binding not supported, HSTI failed, not Modern Standby), the device does not qualify for device encryption in the supported, automatic way. In that state, the Device encryption toggle in Settings will typically not appear, or if it does, the device will not meet the documented requirements for this feature.

So, with the conditions shown in System Information, turning on Windows “device encryption” as described for supported devices is not possible on this hardware/firmware configuration.

---

References:

• Device Encryption in Windows
• BitLocker overview
• Encryption and data protection