Fixing FVE_E_NOT_ACTIVATED 0X80310008 BitLocker error

Quick answer

Run manage-bde -on C: in an admin command prompt. If it still fails, check TPM status with tpm.msc and reinitialize it. Then reboot and try again.

What's going on here?

You see FVE_E_NOT_ACTIVATED (0x80310008) when you try to turn on BitLocker on a drive. The error message says: "This volume has not been provisioned for encryption." That's Windows telling you it hasn't set up the drive for encryption yet. It's not a crash, just a missing step.

Usually this happens because the TPM chip isn't initialized properly, or the BitLocker metadata on the drive is missing. I had a client last week with a refurbished Dell Latitude — the TPM was disabled in the BIOS. Another time, a Lenovo ThinkPad had an old TPM firmware that didn't play nice with Windows 11.

Fix steps

1. Check TPM status. Press Win + R, type tpm.msc, hit Enter. Look at the status. It should say "The TPM is ready for use." If it says "Compatible TPM cannot be found" or "Off", you need to go into the BIOS/UEFI and turn the TPM on. Usually it's under Security or Advanced settings. On a Dell, it's called "TPM 2.0 Security". On a Lenovo, "Security Chip". Set it to Enabled or On.
2. Initialize TPM. If TPM is on but not initialized, in tpm.msc click "Actions" then "Prepare the TPM..." or "Initialize TPM". You might need to reboot. After reboot, open tpm.msc again and confirm it's ready.
3. Clear old BitLocker metadata. Open an admin command prompt. Run manage-bde -status C: to see if BitLocker thinks it's partially set up. If it says "Conversion Status: Used Space Only Encrypted" or something weird, run manage-bde -off C: to turn it off. Then restart.
4. Run the encryption wizard again. Right-click the drive in File Explorer, select "Turn on BitLocker". If it still gives the error, go to step 5.
5. Force provision via command line. In admin command prompt, run manage-bde -on C: -RecoveryPassword -UsedSpaceOnly. This skips the GUI and provisions the drive directly. If it works, great. If not, check the event log for more clues.

Alternative fixes if the main one fails

• Update TPM firmware. Go to your PC manufacturer's support site. Look for a TPM firmware update. Dell, HP, and Lenovo all have them. This fixed a Dell Inspiron 5590 I worked on last month — the old firmware caused the provisioning to fail silently.
• Disable and re-enable TPM in BIOS. Reboot into BIOS, find the TPM setting, disable it, save and exit. Boot into Windows, then reboot again into BIOS and re-enable TPM. Windows should re-initialize it on the next boot.
• Use Group Policy to force provisioning. If you're on Windows 10 Pro or Enterprise, open gpedit.msc. Go to Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives. Enable "Require additional authentication at startup" and set it to "Allow BitLocker without a compatible TPM" (if TPM is the issue). Reboot and try again.
• Check for secure boot. BitLocker on modern systems needs Secure Boot enabled in BIOS. Boot into BIOS, find Secure Boot under Security or Boot, set it to Enabled. Then try again.

Prevention tip

Before you even try to turn on BitLocker, always check the TPM status first. Run tpm.msc from an admin prompt. If it's not ready, fix that first. Also make sure your BIOS is up to date — I've seen old BIOS versions cause this error on HP EliteBook 840 G3 laptops. A BIOS update cleared it right up. And keep Secure Boot on — it's not just for BitLocker, it helps with overall security.

"Had a small client whose entire file server went down because of this error on the C drive. Took me 10 minutes to fix — TPM was disabled in BIOS. Don't overcomplicate it."