BitLocker encryption stuck in a suspended state

Issue 

BitLocker encryption is suspended on an encrypted drive.

Symptom 

The Monitor > Drive Encryption page shows a machine with the Protection suspended ⚠️ icon. The drive remains physically encrypted, but BitLocker protection is suspended. 

Cause 

The most frequent cause is a Windows OS update. Windows suspends BitLocker automatically before updates and resumes it afterward, but this process can sometimes fail. 

Other causes include BIOS or firmware updates, driver updates, and manual suspension by an administrator or script.

Resolution

If BitLocker does not automatically resume itself within an hour, use Windows command prompt to manually re-enable BitLocker protection:

1. On the endpoint, open the Start menu. 
2. Search for Command Prompt.
3. Right-click on the search result.
4. Select Run as administrator.
5. Enter the following command:

   • manage-bde -protectors -enable C:

6. If BitLocker is managed through Group Policy, force a Group Policy refresh with the following command:

   • gpupdate /force

7. After BitLocker protection resumes, verify the suspended status is cleared in Nebula.

Return to Drive Encryption guide.