Encryption Invoked by Bitlocker but not from The Safegaurd Console

Question

Hi All, 
 we are facing this problem when we install Sophos Safegaurd: 8.00.251 and later on Windows 10 Machine (1709- or 1803) on Dell Latitude E7270;E7280:7480 when we restart the machine and logon withth e user the pc is encrypted directly by windwos bitlocker , but bitlocker is not engaged by Sophos Safeguard (policy) so than the machine appear as crypted by bitlocker AES 128 and not 256. It appear also the propt of safegaurd to set the pin with postpone or encrypt and not restart and encrypt. The solution that we found is to uninstall Safeguard , restart the machine than from windows cmd we run the command manage-bde off C: and then reinstall, Please could you help me on this issue? On old Dell Latitude or Lenovo there is not this issue.

Pietro Guzzetti · Answer

Hi all, 
 
 I found what was causing the issue: The issue is realated to the OS (Windows 10 from build 1803) and some specific Hardware of Laptop; I found the issue in Dell and HP different models. Before installing the Sophos Safegaurd you need to check the status of bitlocker. I did a test this morning, I reimaged a new Laptop Dell 7490. After Completed the setup Irun the cmd (run as administrator) , "manage-bde -status" and as in the image below you found that the disk is already encrypted. 
 So the disk is encryted, 100%, with method XTS-AES 128. So before installing sopho safeguard You need to decrypt it ; Run Cmd (run as adminstrator) , insert the command: "manage-bde C: -off" 
 
 It will start the decryption , and you can check the status running the same command as before "manage-bde -status". when completed the decryption it will appear, Fully Decrypted as the image below: Once fully decrypted you can install sophos safeguard without issue. 
 
 Hope that this can help You too. 
 Pietro