Device Encryption installation issues

Hello - Can you please open an elevated (Admin) command prompt and type in "manage-bde -status" and then post the results?

Great, thank you. Could we also have a "get-tpm" from an elevated Powershell prompt please?

already shipping. I already now. What's the problem exactly?

It can be lots of different things annoyingly. A TPM with known security vulnerabilities, TPM not in a ready state, key protectors messed up, ownership of TPM not correct, TPM lockout from too many PIN attempts, TPM 1.2 mode when it should be TPM 2.0... I found the best thing to do is locally see if TPM will enable and the drive will encrypt. Generally if Windows fails to do it - so will Sophos. So getting it working in Windows (which is quicker as it can be enabled manually) is a good test. Once this works - generally Sophos will then work as it should. 

It can be lots of different things annoyingly. A TPM with known security vulnerabilities, TPM not in a ready state, key protectors messed up, ownership of TPM not correct, TPM lockout from too many PIN attempts, TPM 1.2 mode when it should be TPM 2.0... I found the best thing to do is locally see if TPM will enable and the drive will encrypt. Generally if Windows fails to do it - so will Sophos. So getting it working in Windows (which is quicker as it can be enabled manually) is a good test. Once this works - generally Sophos will then work as it should. 

Yes I understand. But my TPM version is TPM 2.0 and it is active. 
So what do you suggest is trying normal Bitlocker installation without Sophos Encryption? If it works does it mean Sophos will work too?


How did you solve it when you had this problem?
annoying problem lol

Yes - If TPM all looks good (you didn't post the results of the Powersell "get-tpm") then I would enable Bitlocker manually and see what happens? You can do this at the command prompt - or within Windows itself. 

Will it be a version?