Level 1

8 points

Unresponsive Trackpad and Keyboard while using BitLocker Encryption on Win10 BootCamp Partition - 12 Second Delay

Goal:

Encryption of Windows 10 Enterprise Bootcamp Partition on Early 2015 13-inch MacBook Pro Retina (Running Sierra) - Wiping macOS from HD (so that Windows is the only OS) would be ok - but didn't seem to resolve the issue.

Problem:

BitLocker Encryption is successful (after disabling TPM Requirement in Group Policy) but leads to rough user experience.

Primary Symptoms:

Built-in Trackpad and Keyboard become virtually unusable on light blue BitLocker Password/Decryption Screen. There is a 12 second window of time where it is unresponsive followed by a ~1 second window where I'm able to enter characters into the password field, this is then followed by another 12 second window... and so the story goes.

Other Symptoms:

If I have a USB Drive with an LED plugged in it starts flashing during the 1 second window.
If I hold option to try to boot from a different partition or external drive it takes a very long time for them to appear and when the screen finally comes up the same 12 second delay occurs

Video of Symptoms:

https://youtu.be/2lRclze_YEw

Any ideas what might be going on here?

Thinking it could have to do with the MBR (Master Boot Record)

Thanks! (Additional Details below)

Things I have tried, but that did not work:

Using a USB Key - Improved user experience as Keyboard input isn't required, but slow startup persists - best option so far
Having File Vault both Enabled and Disabled
Enabling File Vault Before and After Enabling BitLocker
Using the new and legacy Windows BitLocker encryption methods.
Plugging in a USB Keyboard and Mouse - Seems to resolve the unresponsiveness, but isn't a reasonable solution when on the road.
Wiping macOS and installing Windows only.

Other notes:

After removing the BitLocker Encryption - part of the issue persists - keyboard and mouse are responsive but startup is slower - perhaps by 12 seconds
I have had the delayed (by 12 seconds) Keyboard and Mouse issue on the Mac side when BitLocker was enabled and booted into macOS
Issue exists on both El Cap and Sierra

MacBook Pro with Retina display, macOS Sierra (10.12.1), Early 2015

Posted on Nov 30, 2016 10:50 AM

33 replies

tdb28 Author

Level 1

8 points

Dec 1, 2016 12:30 PM in response to Loner T

Working to track one down. Will report back once I'm able to try this out. I still need to use the media creation tool to make the drive bootable right?

Loner T

Level 9

59,536 points

Dec 1, 2016 12:34 PM in response to tdb28

As long as the partition has an EFI Bootloader, you should be able to boot from it. BY default, MCT will put all necessary files on the USB. You do not need to repeat the process if you move the contents from one USB to another.

tdb28 Author

Level 1

8 points

Dec 1, 2016 2:17 PM in response to Loner T

Still working on getting a HDD.

I did boot another MacBook Pro (one that was only running OS X) into Target Disk Mode and then attached it via Thunderbolt to the Computer with the BitLocker Partition that is having the problem, held down option on the BitLocker/Problematic Computer, and still experience the delay.

There is a delay for the Startup Disk Selection Screen to first appear and then when it finally does come up it is difficult to select the right disk because of the same 12 second delay.

When FileVault was enabled on the Computer that was in Target Disk Mode the delay persisted on the decryption/login screen as well.

When I disabled FileVault on the Target Disk Mode computer the delay was still present on the Startup Disk selection but then went away on the login screen.

Seems like there is some sort of pre-boot system that BitLocker is altering in the wrong way and needs to be modified someway.

Loner T

Level 9

59,536 points

Dec 1, 2016 2:54 PM in response to tdb28

What is the year/model of your second Mac?

tdb28 Author

Level 1

8 points

Dec 1, 2016 2:59 PM in response to Loner T

Exact same specs - MBPr 13-inch, Early 2015, 2.7GHz, 16GB, 256GB

Loner T

Level 9

59,536 points

Dec 1, 2016 3:19 PM in response to tdb28

There is also a provision for using a USB Key, rather than a password for TPM. Is that an option for your testing?

tdb28 Author

Level 1

8 points

Dec 1, 2016 3:30 PM in response to Loner T

Yes, it is an option that I've tried.

The startup is still quite a bit slower than it should be, and we were hoping for a password access model, but all in all the user experience while not ideal is acceptable, so it will likely be the route we go.

Sophos has some interesting pre-boot/POA options, but these require a server something we'd like to avoid having to setup and maintain...

Loner T

Level 9

59,536 points

Dec 1, 2016 3:44 PM in response to tdb28

To step back a little, is there a specific requirement to use BitLocker or would other encryption alternatives work?

tdb28 Author

Level 1

8 points

Dec 1, 2016 3:50 PM in response to Loner T

No there is not, definitely open to other options. Really just trying to get the BootCamp partition encrypted somehow.

Loner T

Level 9

59,536 points

Dec 1, 2016 4:10 PM in response to tdb28

Two separate possibilities to consider. TrueCrypt is one. The other option is to separate the OS (C:) from user data (D:) and use BitLocker on D:. This will avoid the delays due to the encryption of Windows-only C: . D: could be internal on 2013 or later Macs. This requires an EFI Windows installation, with partitions created manually before Windows is actually installed.

tdb28 Author

Level 1

8 points

Dec 1, 2016 4:18 PM in response to Loner T

Thanks.

The separate partitions is an interesting idea. I will give that a try tomorrow or this weekend and will report back.

My understanding is that TrueCrypt is no longer supported/in development, so thinking it might be best to avoid that unless it really is ok to use...?

Thank you so much for all your help!

Loner T

Level 9

59,536 points

Dec 1, 2016 4:31 PM in response to tdb28

Please post back, if you need assistance with the partitioning/EFI boot on your Mac.

Laki10

Level 1

4 points

Dec 25, 2016 7:53 AM in response to tdb28

I'm having the same exact problem and will be investigating today. I wanted to check in and see if you found a solution on your end. One thing that is interesting is that I had both BitLocker and FileVault running side by side with no issues for a few months on my MBP and this problem only started happening recently. First thing I will be looking at is the latest windows updates and see if rolling some of these back will restore normal function.

Loner T

Level 9

59,536 points

Dec 25, 2016 8:10 AM in response to Laki10

You should also check corresponding OS X updates, especially security updates.

Laki10

Level 1

4 points

Dec 25, 2016 8:35 AM in response to Loner T

Fixed. The culprit (in my case) was Windows Update KB3206632. This update renders the MBP keyboard useless on start and causes the complications described above. Uninstalling this update fixed all issues for me. There are other options like forcing drivers to load pre-boot that I haven't tried, but will steer clear from KB3206632 for now and see if I can jump ahead when the next one is available.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Unresponsive Trackpad and Keyboard while using BitLocker Encryption on Win10 BootCamp Partition - 12 Second Delay