How to Fix 'BitLocker Waiting for Activation' Issue on Windows 11?

Bitlocker is a feature that protects your hard disk from external attacks or from offline attacks. It is a full volume encryption feature included with Microsoft Windows (Pro and Enterprise only) versions starting with Windows Vista. It is designed to protect data by providing encryption for entire volumes. By default, it uses the AES encryption algorithm in cipher block chaining (CBC) or XTS mode with a 128-bit or 256-bit key. This encryption algorithm is strong enough to protect your HDD and your data. For example, if your HDD is encrypted and you lost your HDD and if someone tries to access your data without the Recovery key then they can’t get anything. Overall BitLocker is a built-in encryption feature in the Windows Operating system that helps to protect your data by encrypting the drives. Sometimes you may receive an error like “BitLocker Waiting for Activation” on an encrypted Volume, which prevents the encryption from functioning correctly. This error occurs when encryption stops during the encryption process, the key is missing or the System settings were changed.

Table of Contents

What Causes Bitlocker Waiting for Activation Issue?

Here are the following reasons, that cause BitLocker Waiting for Activation issues in Windows 11.

If the BitLocker encryption was started and interrupted in between, then the volume may remain in a waiting state.

If the BitLocker Key wasn’t saved properly and the BitLocker service operates improperly.

The TPM (Trusted Platform Module) feature remains disabled inside the BIOS configuration.

BitLocker requires NTFS for System Drives, if the drive is formatted as FAT32 or exFAT, then the activation may fail.

Corrupted System FIle, Drive Letter Changes, and System or Firmware Updates.

Also Certain BiLocker Policies in the Group Policy Editor might prevent automatic activation.

Fix ‘BitLocker Waiting for Activation’ Issue on Windows 11:

Follow the below resolution methods to fix ‘BitLocker Waiting for Activation’ Issue on Windows 11.

Solution 1: Enable TPM and Secure Boot in BIOS

BitLocker Encryption requires TPM presence, TPM should be enabled. Follow the steps below to enable the TPM and make sure the Secure Boot is enabled.

Restart your system, and Enter into the BIOS, you must press the desired BIOS key depending on your Laptop or Computer manufacturer. Press (F2, F10, F12, or Del) key to enter into the BIOS.

Once you Enter the BIOS, Proceed to the Security section or Advanced Settings.

Check TPM (Trusted Platform Module) Enabled under System Settings.

Also, check whether the Secure boot is enabled or not, if not Enable the Secure boot, you can find the Secure boot in the Boot Section.

Save your modifications and restart your system, Try to activate the BitLocker again, Mostly this will fix the issue.

Solution 2: Start the BitLocker Drive Encryption Service

To Start the BitLocker Drive Encryption the BitLocker Service needs to be running, if there is any issue with the BitLocker service then we may receive this kind of error. Restarting the BitLocker Service may resolve this problem.

Open Run Command by pressing Windows + R and type services.msc and hit enter, this command will open the Services Management Console.

Now Search for “BitLocker Drive Encryption Service”, right click on the service, and choose Properties.

Start the Bitlocker Drive Encryption service-BitLocker Waiting for Activation

Under the Properties Window, click on the General tab, and set the Startup type to “Automatic” and Click on Start to Start the service.

Click on Apply and OK and restart the System once.

After restarting your computer check whether BitLocker is Active or not.

Solution 3: Check BitLocker Group Policy for the Activation Issue

Sometimes Certain BitLocker policies in the Group Policy Editor might prevent automatic activation. Follow the below steps to enable the Correct Group Policy to fix the Bitlocker activation issue.

Open Run command by pressing Windows + R and type gepedit.msc and hit enter, this command will open the Group Policy Editor.

Next, follow the below path.

Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives

From the left-hand side click on the “Operating System Drives” policy folder and from the right-hand side look for the policy named “Require additional authentication at startup” Double-click on it and open the Policy Settings.

Require additional authentication at startup-BitLocker Waiting for Activation

Under Policy Settings, Click on Enabled, and make sure the following option is checked “Allow BitLocker without a compatible TPM (requires a password or a startup key on a USB flash drive)”.

Click on Apply and OK, Now try to activate the Bitlocker after the System restarts.

Solution 4: Initialize and Format the Drive

Sometimes due to lacks of proper initialization, the Failure of BitLocker activation error occurs. To resolve this error, Initialize the drive manually.

Open the Run command by pressing Windows + R and type diskmgmt.msc and hit enter, this command will open the Disk Management Console.

Look for the drive that needs to be activated, right-click on the drive, and then select “Initialize Disk” from the Menu.

Select the GPT (GUID Partition Table) via the dialog box. Select the unallocated space and then right-click to choose New Simple Volume from the Options.

Initialize and format the drive-BitLocker Waiting for Activation

Then Choose the NTFS as the drive format and select the drive letter during the assignment process, try to enable the BitLocker again.

Solution 5: Reset BitLocker using Command Prompt

Open the command prompt in elevated mode, click on the start menu and search for Command Prompt, right-click on it, and choose Run as Administrator.

First, check the BitLocker encryption status by executing the following command.

manage-bde -status <drive letter>:

Ensure the Conversion Status is Fully Decrypted.

Replace <drive letter> with the actual drive letter where BitLocker is enabled (e.g., C:).

To disable BitLocker on a specific drive, use the following command:

manage-bde -off <drive letter>:

Again, replace <drive letter> with the actual drive letter.

You can activate the BitLocker via the Control Panel after the decryption process completes.

How to Enable Bitlocker using PowerShell in Windows 11?

Solution 6: Perform a SFC & DISM Check

Sometimes corrupted system files will create BitLocker-related problems. To check and fix the corrupted system files, we are going to use the SFC scan, System file check is a utility built into the Operating System that will check for system file corruption. The sfc /scannow command (System File Check) scans the integrity of all protected operating system files and replaces incorrect, corrupted, changed, or damaged versions with the correct versions where possible.

Open Command Prompt in elevated mode.

Type the following commands one by one, wait for the command to execute fully, once the command is executed successfully, type another command.

DISM /Online /Cleanup-Image /CheckHealth

DISM /Online /Cleanup-Image /ScanHealth

DISM /Online /Cleanup-Image /RestoreHealth

The above-mentioned commands will fix the corrupted system files, it will download and replace the damaged files automatically. And this will fix 100% Disk and CPU Usage.

Read: What is the use of SFC scan and DISM in windows?

Solution 7: Check for Windows Update

Sometimes Outdated Windows Updates will cause BitLocker related issues, Microsoft release regular updates to resolve the Bitlocker issues via Windows Updates.

Follow the below-mentioned steps to check for updates.

Open Windows Settings by pressing Windows + I and from the left-hand side click on Windows updates.

Click on Check for updates. Windows will automatically download and install suitable updates.