Earlier, we’ve seen following guide for enabling BitLocker on operating system drive:

How To Encrypt Windows 10 Operating System Drive With BitLocker

Today, following above mentioned guide, we were not able to enable BitLocker on one of our Windows 10 device. In this case, while we start BitLocker Drive Encryption wizard by right click on operating system drive and selecting Turn on BitLocker option, following error appears:

The startup options on this PC are configured incorrectly. Contact your system administrator for more information.

FIX The Startup Options On This PC Are Configured Incorrectly For BitLocker In Windows 10

The above mentioned error thus prevented us from enabling BitLocker on operating system drive. This error is supposed to occur mostly on tablet type of devices, because such devices uses Windows touch keyboard. Unfortunately, Windows touch keyboard is not available in pre-boot environment and hence it is the root cause here. So if BitLocker is assumed to be enabled, you’ve no way to provide BitLocker PIN or password as the keyboard isn’t available. Hence, with above mention error, Windows refuses to enable BitLocker on such type of devices.

Luckily, we can fix this problem by with Group Policy manipulation mentioned below. After applying the GPO setting, you enable alternative way to provide pre-boot input using devices (such as USB keyboard) for your Windows 10 system.

FIX: ‘The Startup Options On This PC Are Configured Incorrectly’ For BitLocker In Windows 10/8.1/8

1. Press W8K + R and put gpedit.msc in Run dialog box to open GPO snap-in. Click OK.

Local Group Policy Editor

2. Next, in the GPO snap-in window, navigate here:

Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives

FIX The Startup Options On This PC Are Configured Incorrectly For BitLocker In Windows 10

3. In the right pane of Operating System Drives, look for the policy setting named Enable use of BitLocker authentication requiring preboot keyboard input on slates. The policy is Not Configured by default. Double click on the policy setting to modify its status:

FIX The Startup Options On This PC Are Configured Incorrectly For BitLocker In Windows 10

4. On the policy configuration window, you can set the policy to Enabled state. Click Apply followed by OK. Close GPO snap-in.

Now retry to enable BitLocker on your operating system drive, and this time is should work fine.

Hope this helps!

4 Comments

Add your comment

  • Alouk S

    This fix did not work for me.
    Do you have ant alternate solution ?

  • Munawer Hussain

    Hi,

    Already followed the your given steps but issue still persist.

    Anything more I need to do.

    Thank You :)

    Munawer Hussain

  • jon

    same here

  • JABIR

    This is not a solution.

    We have to find the reasons behind the issue.

    One of the common issues found on the latest Windows 10 OS editions is that the BIOS mode is set to be in Legacy (check using msinfo32)

    We need to convert the MBR partition to GPT using the mbr2gpt tool. Follow the below link for more info:
    youtu.be/hfJep4hmg9o

    Then we need to make changes in the BIOS to support Secure Boot.
    More links on how to do it:
    docs.microsoft.com/en-us/windows/deployment/mbr-to-gpt
    docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/boot-to-uefi-mode-or-legacy-bios-mode
    docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/winpe-create-usb-bootable-drive

    This is the way we can fix the problem without formatting and redoing everything the right way.

    Hope this helps someone.

    Thanks!
    JABIR

  • Leave a Reply

    Your email address will not be published. Required fields are marked *