For the loader to work, TPM needs to be disabled in BIOS. But BitLocker uses TPM to unlock your drive at boot - so if BitLocker is on and you turn TPM off, Windows won't be able to unlock your drive next time you boot. You need to disable BitLocker first. Here's how to do it through Command Prompt.
1. Check which drives have BitLocker
Open Command Prompt as Administrator and run:
manage-bde -status
Look at each drive's Protection Status:
- Protection On means BitLocker is active - you need to disable it on that drive
- Protection Off means it's already disabled - nothing to do for that drive
2. Turn BitLocker off
In the same Command Prompt window, run:
manage-bde -off C:
If other drives showed Protection On in step 1, repeat for each one:
manage-bde -off D:
You'll see a message that decryption has started - that's it, there is no confirmation prompt.
3. Wait for decryption to finish
Decryption runs in the background. Depending on drive size and speed, this takes anywhere from 20 minutes to an hour. You can keep using your PC while it runs, but don't shut down or restart until it's complete.
Check progress by running manage-bde -status again and watching Percentage Encrypted drop from 100% to 0%.
4. Verify it's off
Once decryption finishes, run manage-bde -status one more time. Every drive should show:
- Conversion Status: Fully Decrypted
- Percentage Encrypted: 0.0%
- Encryption Method: None
- Protection Status: Protection Off
At this point BitLocker is fully off and you can safely disable TPM in your BIOS or let our loader do it for you doing the setup process.
Still stuck?
If BitLocker won't turn off, decryption gets stuck, or you can continue to get the warning error in our loader, open a ticket with your Windows version and the output of manage-bde -status.