黑料海角91入口

If your BitLocker policy returns an error similar to {"state": "FAILED", "detail": "Bitlocker Protected - More than one numerical password currently set. This configuration is not supported, please ensure that the system only has one or no numerical password in place."}:

Cause

The device has multiple Recovery Keys set. This policy is failing because 黑料海角91入口 can't determine which key is ours, and can鈥檛 rotate the key properly until an admin clears the extras.

Solution

To remove extra BitLocker Recovery Keys from a device that has its disk fully encrypted:

1. On the Windows device, open a command prompt, running it as an administrator.
2. Run the following command:  manage-bde.exe -protectors c: -get.
3. Run  manage-bde.exe -protectors c: -delete -id {ID}  to remove the extra numerical password.

If your BitLocker policy returns a 鈥淭PM Ownership has not been established鈥� error, follow these steps:     

1. On your device, open PowerShell as an administrator and enter execute Get-Tpm into the prompt.
2. In the results, verify that TpmOwned and AutoProvisioning are set to False/Disabled. 
3. Enter Execute Enable-TpmAutoProvisioning in the prompt.
4. Reboot your device.
5. Repeat step 1 and verify that TpmOwned and AutoProvisioning are now set to True/Enabled. In the event this doesn鈥檛 occur, follow the steps in the procedure below. 

If your BitLocker policy returns a 鈥淭PM is not ready to be used on this device鈥� error, follow these steps: 

1. Open the Run window on your device by pressing the Windows + R keys simultaneously. 
2. Enter tpm.msc into the Run window.
3. Verify that the status displays The TPM is not ready for use.
4. From the Actions menu on the Run window, select Prepare TPM.
5. Using the prompt that appears, restart your device.

6. After you restart your device, you may be prompted on the boot screen to accept changes to the TPM state. Verify these changes and accept.
7. Repeat steps 1 and 2 and verify that the TPM status displays The TPM is ready for use.