Windows 10 Bitlocker TPMAndPINAndStartupKey authentication does not work

[TinTin_82]

Hi there


I currently use Bitlocker to fortify my laptop security due to its disk encryption feature. I also want to enable pre OS authentication to align with "Bitlocker Countermeasure" by using both PIN number and USB stick.


I use this command to enable pre OS authentication with TPM, PIN and Startup key:


manage-bde -protectors -add C: -tpsk -tsk F:


C: is my operating system disk

F: is my USB stick


But there's a problem: after I use above command, my laptop (with USB stick contain startup key) still boot without prompt PIN number enter! I suppose this feature will prompt user to enter correct PIN number and require user to plug correct USB stick which contain startup key .


I also use this command but it didn't help:


manage-bde -protectors -add C: -TPMandPINandStartupKey -tp <my_pin> -tsk F:



Please tell me if I did anything wrong or this feature is not supported. My laptop is HP Pavilion x360 Convertible with following specs:

• OS: Windows 10 Pro 20H2 OS build 19042.844
• RAM: 8GB
• Hard Drive: SSD 240 GB
• CPU: Intel Core i3-7100U 2.4 GHz
• TPM 2.0 supported

Continue reading...