Win 10 Pro Bitlocker TPM+PIN Always incorrect on first try

[marvinej]

I recently purchased an HP ENVY x360 HP ENVY x360 15z

First thing i did was install my SSD and install a fresh copy of windows 10 pro.

The laptop does have a TPM listed in the BIOS and bitlocker seems to be working, however every time i turn on my computer it tells me the Pin is incorrect the first time i enter it. If i just push the enter key again without typing in the pin again it continues to boot normally. My concern is that perhaps the encryption is not working correctly.

This error is showing in the event logs

Bootmgr failed to unseal VMK using the TPM 0x80280013


HP was completely useless and wouldn't let me talk to a knowledgeable technician without paying even though i just bought the laptop. They claim that by installing a clean copy of windows i voided the software warranty.

 

[captaincharisma]

why are you calling HP about bit locker? bit locker is a security feature of windows for encrypting hard drives. they are not to blame because they would not have enabled something like bit locker on your computer.

add to the fact that the issue is with an SSD drive that you added and wasn't included with the computer

 

[marvinej]

why are you calling HP about bit locker? bit locker is a security feature of windows for encrypting hard drives. they are not to blame because they would not have enabled something like bit locker on your computer.

add to the fact that the issue is with an SSD drive that you added and wasn't included with the computer

Try again buddy. Don't bother replying if you don't plan to be helpful. Finger pointing solves nothing.

Spoiler

----------------------------------------------------------------------------
CrystalDiskInfo 7.5.1 (C) 2008-2018 hiyohiyo
Crystal Dew World : https://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 10 Professional [10.0 Build 16299] (x64)
Date : 2018/01/19 14:34:09

-- Controller Map ----------------------------------------------------------
+ Standard SATA AHCI Controller [ATA]
- Samsung SSD 850 EVO 500GB
- Microsoft Storage Spaces Controller [SCSI]

-- Disk List ---------------------------------------------------------------
(1) Samsung SSD 850 EVO 500GB : 500.1 GB [0/0/0, pd1] - sg

----------------------------------------------------------------------------
(1) Samsung SSD 850 EVO 500GB
----------------------------------------------------------------------------
Model : Samsung SSD 850 EVO 500GB
Firmware : EMT02B6Q
Serial Number :
Disk Size : 500.1 GB (8.4/137.4/500.1/500.1)
Buffer Size : Unknown
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : ---- (SSD)
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ATA8-ACS version 4c
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 3056 hours
Power On Count : 773 count
Host Writes : 5422 GB
Wear Level Count : 16
Temperature : 32 C (89 F)
Health Status : Good (100 %)
Features : S.M.A.R.T., 48bit LBA, NCQ, TRIM, DevSleep
APM Level : ----
AAM Level : ----
Drive Letter : C:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
05 100 100 _10 000000000000 Reallocated Sector Count
09 _99 _99 __0 000000000BF0 Power-on Hours
0C _99 _99 __0 000000000305 Power-on Count
B1 _99 _99 __0 000000000010 Wear Leveling Count
B3 100 100 _10 000000000000 Used Reserved Block Count (Total)
B5 100 100 _10 000000000000 Program Fail Count (Total)
B6 100 100 _10 000000000000 Erase Fail Count (Total)
B7 100 100 _10 000000000000 Runtime Bad Block (Total)
BB 100 100 __0 000000000000 Uncorrectable Error Count
BE _68 _52 __0 000000000020 Airflow Temperature
C3 200 200 __0 000000000000 ECC Error Rate
C7 100 100 __0 000000000000 CRC Error Count
EB _99 _99 __0 00000000003C POR Recovery Count
F1 _99 _99 __0 0002A5CAABB0 Total LBAs Written

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 5332 5241 4E58 3048 3731 3830 3034 4620 2020 2020
020: 0000 0000 0000 454D 5430 3242 3651 5361 6D73 756E
030: 6720 5353 4420 3835 3020 4556 4F20 3530 3047 4220
040: 2020 2020 2020 2020 2020 2020 2020 8001 4001 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0101
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0F10
070: 0000 0000 0000 0000 0000 001F 850E 00C6 016C 0060
080: 03FC 0039 746B 7D01 4163 7469 BC01 4163 407F 0001
090: 0004 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0008 4000 0000 5002 538D
110: 410B 991D 0000 0000 0000 0000 0000 0000 0000 401E
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0001
170: 2020 2020 2020 2020 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 0001 0000 0000
220: 0000 0000 107F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0800 0000 0000 0000 0000
240: 0000 0000 0000 4000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 43A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 05 33 00 64 64 00 00 00 00 00 00 00 09 32
010: 00 63 63 F0 0B 00 00 00 00 00 0C 32 00 63 63 05
020: 03 00 00 00 00 00 B1 13 00 63 63 10 00 00 00 00
030: 00 00 B3 13 00 64 64 00 00 00 00 00 00 00 B5 32
040: 00 64 64 00 00 00 00 00 00 00 B6 32 00 64 64 00
050: 00 00 00 00 00 00 B7 13 00 64 64 00 00 00 00 00
060: 00 00 BB 32 00 64 64 00 00 00 00 00 00 00 BE 32
070: 00 44 34 20 00 00 00 00 00 00 C3 1A 00 C8 C8 00
080: 00 00 00 00 00 00 C7 3E 00 64 64 00 00 00 00 00
090: 00 00 EB 12 00 63 63 3C 00 00 00 00 00 00 F1 32
0A0: 00 63 63 B0 AB CA A5 02 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53
170: 03 00 01 00 02 FF 00 09 01 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 05 0A 00 00 00 00 00 00 00 00 00 00 09 00
010: 00 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00
020: 00 00 00 00 00 00 B1 00 00 00 00 00 00 00 00 00
030: 00 00 B3 0A 00 00 00 00 00 00 00 00 00 00 B5 0A
040: 00 00 00 00 00 00 00 00 00 00 B6 0A 00 00 00 00
050: 00 00 00 00 00 00 B7 0A 00 00 00 00 00 00 00 00
060: 00 00 BB 00 00 00 00 00 00 00 00 00 00 00 BE 00
070: 00 00 00 00 00 00 00 00 00 00 C3 00 00 00 00 00
080: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
090: 00 00 EB 00 00 00 00 00 00 00 00 00 00 00 F1 00
0A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4E

 

[Paul NZ]

Looks like that error means

An encrypted blob is invalid or was not created by this TPM.

So changing the hdd may have something to do with it

When you changed to ssd, did you clear the TPM first?

 

[marvinej]

Looks like that error means

An encrypted blob is invalid or was not created by this TPM.

So changing the hdd may have something to do with it

When you changed to ssd, did you clear the TPM first?

yes i did clear the TPM. I'm wondering if it could be conflicting with secure boot. I have not really tried to use TPM with secure boot enabled before.

 

[Paul NZ]

Dont think secureboot would cause any probs.

I'm using an ASUS / Infineon TPM 2 module in this with secureboot enabled

Just recently found the program to update the firmware to update it.

Since, there's a vulnerability in TPM modules as well

Only thing it may have been locked to the original hdd or something

 

[marvinej]

TPM shows its AMD 3.8.0.4 - 2.0.
there is not an update for it on HP.com in the drivers. not sure where i would find such an update. I am not getting any log files notifying me that my TPM is vulnerable as i have seen at my office.

https://pasteboard.co/H3Hzmeu.png

 

[Paul NZ]

It maybe because its not Infineon. It'll be firmware if it were available not a driver