3

I'm using Windows 11 Pro. I'm trying to encrypt an external HDD through BitLocker (Seagate One Touch w/PW SCSI), size: 2TB.

My PC Specs: My PC Specs

Error Message

BitLocker can't enable encryption on this hardware encrypting drive volume because the drive bands couldn't be enumerated.

Here's a screenshot of the error:

screenshot of the error

  • Ext4 + LUKS on Linux systems work just fine on the drive but, can't use them due to cross-platform compatibility.
  • I have tried formatting the drive.
  • I have tried reinstalling Windows.
  • I have performed checks on the drive (Health: 100%)

I have tried the following methods...

Method-1, Step-1: enter image description here

Step-2: enter image description here

Step-3: enter image description here

2nd Method, Step-1: enter image description here

Step-2: enter image description here

Step-3: enter image description here

Always the same error!!!

skywalkerSam
  • 31

2 Answers2

0

This fix can only be done at first reboot after a fresh install of Windows.

  1. At OOBE "the series of annoying questions after first reboot after installing windows" press shift+F10 to get command prompt.

  2. Then type reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker /v PreventDeviceEncryption /t REG_SZ /d 1 then complete setup process to get to your new desktop.

  3. At the desktop of your freshly installed Windows OS, it's time to enable hardware encryption by typing Win+R to get run dialog, then enter gpedit.msc and click ok.

  4. Next click "Administrative Templates" on the left, followed by "Windows Components" on the right, then "Bitlocker Drive Encryption", then "Operating System Drives" then find and enable the policy named "Configure use of hardware-based encryption for operating system drives".

  5. Within the policy after clicking enable, turn off the software fallback option (first option on the left in that policy). Apply, close out.

  6. Back at the desktop type Win+R again to get run dialog, then type in cmd and then press Ctrl+Shift+Enter to enable admin privileges confirm with "Yes".

  7. Type manage-bde -on C: -fet Hardware -tp where -tp means TPM 2.0 and PIN as requirements for start-up. There are other options.

If the stars are aligned, and Heaven's light shines down on you, right at this critical moment in your journey, it will be a success and you will have just enabled hardware encryption.

If not, you may need to provision your drive to use hardware encryption through the manufacturer's support software like Samsung Magician for example. Then try again.

Moral of the story: if software encryption is enabled, hardware encryption is not an option until you reinstall windows.

This is the only way I know of achieving hardware encryption on a hardware encryption capable drive being used as the OS boot drive.

Amazon Dies In Darkness
  • 9,990
Ads
  • 1
0

I faced the same issue with BitLocker and solved it without reformatting the drive using IM-Magic Partition Resizer Free

  1. Right click on the partition of the drive facing this issue.
  2. Select Resize/Move Partition.
  3. Shrink the drive partition to have 2MB of unallocated space after.
  4. Click Apply Changes
  5. Then re-expand the partition to take all the space available on the drive having 0MB unallocated space before and after.
  6. Click Apply Changes

Then I turned on BitLocker without any issues.

Before doing this on my drive there was 0MB of unallocated space before, and 0.1MB of unallocated space after my partition.

Hope this helps and really solves the issue for people seeing this question in the future.

MOJT
  • 1