What does HRESULT 0x80310064 (FVE_E_POLICY_STARTUP_PIN_KEY_NOT_ALLOWED) mean?

 
Previous Next
FVE_E_POLICY_STARTUP_KEY_REQUIRED FVE_E_POLICY_STARTUP_PIN_KEY_REQUIRED

FVE_E_POLICY_STARTUP_PIN_KEY_NOT_ALLOWED

FVE_E_POLICY_STARTUP_PIN_KEY_NOT_ALLOWED The effective BitLocker policy forbids the combination of a startup key and startup PIN. Both factors may be valid individually, but the selected combination is not permitted for this operating-system drive.

What to check

  • Check the permitted startup protector combinations in the effective policy, not only the local BitLocker UI.
  • Choose an allowed combination such as TPM only, TPM plus PIN, or TPM plus startup key if policy permits it.
  • If the combination is required by design, resolve the policy before editing protectors.
manage-bde -protectors -get <drive>

Microsoft: Configure BitLocker policy settings

Microsoft: manage-bde -protectors

Microsoft: BitLocker boot and TPM countermeasures


Looking for a different code? Search another status or error code.