Thread Info
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Device is not encrypted: BitLocker Hardware Test has failed on the computer

LHerzog

We're seeing that issue on several new computers. I cannot find information about the error "BitLocker Hardware Test has failed on the computer". Is this a known issue?

HP EliteBook 640, Intel 13th Gen.

These errors are logged every day in Central for these computers:

Mar 5, 2024 7:02 AM      Device is not encrypted.    
Mar 5, 2024 7:02 AM     A BitLocker recovery key has been received from: COMPUTERNAME.
...
Jan 30, 2024 6:32 PM     Device Encryption failed on volume with id: BD886FBE-xxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxx. Reason: BitLocker Hardware Test has failed on the computer.



This thread was automatically locked due to age.
  • 0

    Hi LHerzog,

    Thanks for reaching out to us. 

    I was only able to find limited information on the BitLocker Hardware Test
    BitLocker uses a hardware test as a dry run to make sure that all the key protectors are correctly set up and that the computer can start without issues.

    Regarding your issue, I'd suggest checking "C:\ProgramData\Sophos\Sophos Data Protection\Logs\cde.log" to see if any additional information from the hardware test results is shown. 

    In a couple of cases I found that if the BIOS on the system is in Legacy mode, this can cause the issue you're experiencing. The details on the following page may be of some help: Device Encryption system compatibility

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
    • 0 in reply to Qoosh

      Hi & thanks for the hints. They helf for the beginning.

      At least one machine was encrypted successfully after reinstalling Sophos EP.

      An other machine was encrypting after we just started encryption in Windows Bitlocker settings manually. Not something we want do do regularly.

      We're trying to rule out some BIOS versions and Secure Boot Settings now. And of course checking the cde log.

      • 0 in reply to LHerzog