Query on BitLocker startup screenSolved

Participant
Discussion
1 day ago Feb 19, 2026

Hi Team, 

I’m working with a customer who requires BitLocker encryption on Windows devices. The key requirement is that the BitLocker startup screen must be the first prompt after powering on the devicesand the user must enter a PIN before the Windows login screen appears. 

Encryption is completed successfully, but after reboot, the device goes straight to the Windows login screen and does not show the BitLocker startup PIN prompt.  

Is there anything else we need to configure to ensure the BitLocker startup PIN appears on every boot? 

Replies (3)

Marked SolutionPending Review
Hexnode Expert
1 day ago Feb 19, 2026
Marked SolutionPending Review

Hi  @vance_j , Thanks for the information! 

Based on your description, it seems that the device is being encrypted, but the BitLocker startup screen is not appearing on boot. This usually happens when the OS drive is protected using TPM only.  

To display the BitLocker startup PIN screen, the device must use TPM + PIN protection.

Regards, 
Clara sterling, 
Hexnode UEM. 

Marked SolutionPending Review
Participant
1 day ago Feb 19, 2026
Marked SolutionPending Review

Hi, 

How can we verify whether the device is using TPM only or TPM + PIN? 

Marked SolutionPending Review
Hexnode Expert
1 day ago Feb 19, 2026
Marked SolutionPending Review

Hi  @haanaa  and  @vance_j ,  

You can verify this directly from the Windows device by checking the active BitLocker protectors of the OS drive. 

  • Open Command Prompt (as Administrator)
  • Run the following command: manage-bde -protectors -get C: 
  • Review the output. If TPM and PIN are not listed, no startup PIN screen will appear. has not been applied. 
  • To enable TPM + PIN, use this command: manage-bde -protectors -add C: -TPMAndPIN

After running the command, restart the device. The BitLocker startup screen will appear before the Windows login page. 

Regards, 
Clara sterling, 
Hexnode UEM. 

Save